last executing test programs: 7m33.668709385s ago: executing program 2 (id=203): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0xfb87, 0x800, 0x5, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x6, 0x15e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x4000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x1, 0x3, 0x0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x82, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x14, {0x3c7, 0xffffffff, 0x0, 0x80000000, 0x5, 0xfff}}) 7m33.04547939s ago: executing program 2 (id=206): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000400)={0x2, 0x0, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@fadd={0x58, 0x114, 0x6, {{0x7, 0x7}, &(0x7f0000000240)=0x2, 0x0, 0x16b, 0xffffffffffffffff, 0x2000400000, 0x9, 0x11, 0xffff}}], 0x58, 0x40014}, 0x0) 7m32.757922327s ago: executing program 2 (id=207): set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 7m32.191871301s ago: executing program 2 (id=210): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x804000, &(0x7f0000000f00)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x44) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x190) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.stat\x00', 0x26e1, 0x0) 7m30.738234006s ago: executing program 2 (id=213): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000300), 0x12) sendfile(r1, r1, 0x0, 0x10001) 7m30.556196551s ago: executing program 2 (id=214): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x8, 0x28000000000, 0x400, 0x3, 0x1000, 0x8, 0x1002, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2bda, 0x9, 0x40000, 0x63], 0x57000, 0x296151}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m29.874611017s ago: executing program 32 (id=214): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x8, 0x28000000000, 0x400, 0x3, 0x1000, 0x8, 0x1002, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2bda, 0x9, 0x40000, 0x63], 0x57000, 0x296151}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m52.507356921s ago: executing program 4 (id=1150): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 4m52.284127726s ago: executing program 4 (id=1151): r0 = syz_mount_image$btrfs(&(0x7f00000004c0), &(0x7f00000015c0)='./file0\x00', 0x10, &(0x7f0000001040), 0x0, 0x559e, &(0x7f00000103c0)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR") chdir(&(0x7f0000000080)='./file0\x00') ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000580)={0x1}) syz_mount_image$ocfs2(&(0x7f00000002c0), &(0x7f00000000c0)='./file0/file0\x00', 0x22860, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRESDEC=r0, @ANYBLOB="2c6673726f6f743d6865617274626561743d6e6f6e652c61756469742c686173682c00dd71844ff024b8415dffd3e75037120d3be3bc7ac57a83014e8a16b3246a3444779336ecf7ea96fd0833a77261682d85a91507467cbbf18630ad2315557a8a5efbee5af38e00b655ffb89c9afb0810d47a020958f1239a4dc3550000000000", @ANYRESHEX=r0], 0x21, 0x443a, &(0x7f0000005a40)="$eJzs3c9vVNUeAPBzb9tHywNey2PBS17iJJJo1DSFlVoSSymUFioGhRg3w7QdoDrtkHZqXLCoOxNXJi6MC6KJO1aEhVv8E9y4xDWJLtyYmBBrZuZOO/dOx45NpwX9fBJ6557fM9+5555ZXE6cqNxaWMktrOQKS7ny3I2VU7kPy6XVxWKI98h+909nuhEnsd8/l8+ef/vaqRC+m//h8fr6+nqo6g1bOtn0+tdf7sw1HxviTJ1qu1u3tlveCyEcaxlXVU8I4d1vQ4hCCGeStPHkOBBCOBLqedfufHo9t0ujuf+oeDr/ZOaTB6Mnpu/dfdD+vUchfFn63ys3F396vmf0x5d2qXsAAAAAAAAAAAAAAAAAAJ5xk1cuX31rZPPJ3uzzupPJsd3zseu75rluvk0AAAAAAAAAAAAAAAAAAAB4qjWe/38Y5aKjUevz/xPJcaxN/fU3uj9GumfqzcsT50ZOJvu/Ry35ryZJP5/pCUNb7Pue3f/9TKb+1vu/t/azU43xNfodDFE8nDqP4+HhEL5ONn4/Hh2MS+WVyss3yqtL87s2jGdWOv713ftT0Uk29G+J/7+S/Ez8xzPtd3////+2fJuq59d37yv2t5aOf0/bct98HHV0/Z/N1NuL+LNz6fj31tIGmguM1SeAavw/690+/hOZ9rsV/yMhhFxUHWsuNQNU1zDV9HbrFdLS8e+rpaWmzuSDbHf9/5aJ/7lM+/s1/69lb0RsKR3/+k29P1Vi8/ofire//s9n2t+P+FfHv+b+35F0/A/UE3tTRWqfZKfz/2Sm/e7EvydcjZObwJEo9Q24F9XH3+7/qyMtHf/+lvzN339xR+u/C5n6e/X7r9Fv4/dfY/p/Mar//mNr6fgPtC3X6fU/lanX7fl/rLb+Y6fS8T9YS0uvnQdrf/8s/n1Npacz7Xcr/rVVSX8j/pvzye8H6ulfWf91JB3/f9cT4+YSa7W/tfVftP36/2Km/e3iv9b0um9H76B1/Vcd/1q8o8b+cdLxP9S2XDX+33dw/7+Uqdf99X8II9b6O5aO/+G25WrXf//28Z/J1Ot2/F9In/Z2sy8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAp9F4chwMUTycOo/j4eEQzibnx8PBaLYwn58tlec+WAlhIknPhaPRzVJ5tlDKLyyV54v5QqlUngvhXJJ/LPRHK6VyJb9YuH1+o62B6FaxsFyZLRYqIYTJJP3/4XCjrdmFymLhdgjhwkbef+Ly8u1bhaX8/MLy6yMjIyNhamMMQ1Hxo0pxqVLvvZ4bwvRG3cGoaXC17IsbYzkUvV9eXV4qlGrpl5rqlMpzhVJTnZkk7/MwFFWWV5fmCpVivlS+2ehvP40lx4mpK+9cuXSyJf96VD+O7+2wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiLHo6+9kUIobd+FocQclHyIkr+pdx/VDydfzLTF0ZPTN+7++DxVmUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD/YgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwi7do1QMRFEAPjMWWr5lWIX3OtuIIloYEVyBLsPF6FLchHuwsLC1EEETkPxAGl/1fU0gh5l7YQ4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKx3cdvd3Wx3ScnR12Hy8vD69je/SrJJ8nQ6f/5gT3vyPy6vu7Pz7a5/9zLJT/pf7239ST8/Hu8z8x08j3oy7tOv6Zyxpb4t7TfM3aTUJknb58el1qZZdxcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADANztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgWMBAAAAAGH+1lH0bQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8CgAA//+dbxqW") ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000000)={0x0, {0x15, 0x7fff, 0x4, 0x3, 0x6a5e}}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x650ce4b086bd440f) 4m49.352397097s ago: executing program 4 (id=1164): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) pselect6(0x40, &(0x7f0000000080)={0x9, 0xfffffffffffffffa, 0x7, 0x997, 0xffff, 0x3, 0x5f5, 0x80000001}, &(0x7f00000000c0)={0x3, 0xd, 0x8, 0x2, 0x4, 0x4, 0x2, 0x3}, 0x0, 0x0, 0x0) 4m48.40736296s ago: executing program 4 (id=1167): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) 4m48.228995765s ago: executing program 4 (id=1169): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r1, r3, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0x1e2, &(0x7f0000000740)=ANY=[], 0x0) 4m47.768414855s ago: executing program 4 (id=1175): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="03"], 0x8) 4m47.341677146s ago: executing program 33 (id=1175): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="03"], 0x8) 2.740806663s ago: executing program 5 (id=4421): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) socket$nl_generic(0x10, 0x3, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 2.06052558s ago: executing program 5 (id=4426): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f00000004c0), 0x48, 0x820b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 1.805169076s ago: executing program 5 (id=4430): r0 = io_uring_setup(0x213, &(0x7f0000000300)={0x0, 0x417a, 0x80, 0x8001002, 0x3d7}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000040)="f7", 0x1}], 0x1) write$FUSE_ENTRY(r2, &(0x7f0000003600)={0x90, 0x0, 0x0, {0x3, 0x3, 0x0, 0x8000, 0x7fff, 0x4, {0x1, 0x0, 0x1, 0x3ff, 0x9638, 0x81, 0x0, 0x8, 0x3a, 0x2000, 0x100000, 0x0, 0x0, 0x7, 0x400}}}, 0x90) recvmmsg(r2, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}, 0x8000}], 0x1, 0x40002002, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.64470668s ago: executing program 5 (id=4432): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='sysfs\x00', &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='i2c-gpio\n', 0x9) nanosleep(&(0x7f0000000700)={0x0, 0x1dcd6500}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='bq24190 0x6', 0xb) 1.589695561s ago: executing program 1 (id=4433): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a01010000000000000000010000000900030073000900010073797a310000000014000480080002407c40280f0895f56f978bc562b4000000000a0500000000000000000001"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 1.396818246s ago: executing program 1 (id=4436): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) fchdir(r1) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1, 0x373, &(0x7f00000006c0)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_mount_image$fuse(0x0, &(0x7f0000000480)='./file0\x00', 0x1802400, 0x0, 0x0, 0x0, 0x0) 1.24089221s ago: executing program 1 (id=4440): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000840)=""/4095, 0xfff) 1.122958553s ago: executing program 1 (id=4443): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000280)={0x40, 0x11, 0x6, "cf2c410be48c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.047459904s ago: executing program 3 (id=4444): socket$packet(0x11, 0x3, 0x300) socket(0x1e, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000020040000000000000000000d040000000000000000000010040000000400000000000008030000000000000061"], 0x0, 0x52}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1837000000000000000000000800000085550c00000000009500000000000000e95a7f0fda1bc47138b7c53358451a9fa55742722f2d891fcf50e9d9ba8c18740091e294f5e3f6919d2e8a39d6119fbbbca9d0a4fe148f638347e08636ba40af31364908adfd64cafc4f7275fce536a74435dced0929185cb17ff57535ea870a2c0b60fcbf5c929988527d6c39b38e250e3af4a548f228bb66cd2ef0b591cf5da93825149d1a981f2bab3882c5b390aa251aa5c81ea7e1ab578306ec55ed304fb348d866586e62ad91d210f5c3df337b0ad85f7505ece06e1317d2d70bd3f24cf881d1a7f08249f3575d8e2729e72fc73c3c6a9107557d4d73c6a16098fad638dd05006ac2496ff16198b05b4eb885824518b5ebe1c5279595486b387fca4d682a8ae38bed86da508891ffb168899ace398b787f37b3a0390059d733be5fd0"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x24, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x80) 1.038389434s ago: executing program 5 (id=4445): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x94, 0x2c, 0xd2f, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x68, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x6}}, @TCA_U32_SEL={0x54, 0x5, {0xd, 0x8, 0x4, 0x4, 0xffff, 0x4, 0x6, 0x769, [{0x40, 0x2, 0x80000000, 0x401}, {0xfffffff9, 0x9, 0x2, 0x8}, {0x7, 0x7, 0x101, 0xcb}, {0x1, 0x6, 0xfffffffc, 0xffff}]}}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) 992.704935ms ago: executing program 0 (id=4446): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendto$inet(r0, &(0x7f00000002c0)='J', 0x1, 0x4000, 0x0, 0x0) sendmmsg(r0, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000a00)='E', 0x1}, {0x0}], 0x2}}], 0x1, 0x4000045) 880.188578ms ago: executing program 3 (id=4447): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x101}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20840}, 0xc000) 864.096019ms ago: executing program 0 (id=4448): socket$inet(0x2, 0x801, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x9800, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 806.69237ms ago: executing program 5 (id=4449): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10) listen(r0, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x0, 0x0) r1 = accept4$inet(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000600)="00000081fe534d42400000000000000000000100010000000000000000000000000000000000000000000000000000000000000000000000410001000003000000000000000000000000000000000000000000000000010000000100000001000000000000000000000000000008100000000000000000000000000000400000049fe534d4", 0x85) 789.01713ms ago: executing program 3 (id=4450): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) recvmmsg(r0, &(0x7f00000038c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/32, 0x20}, 0xfffffff4}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 704.665872ms ago: executing program 0 (id=4451): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000840)=""/4095, 0xfff) 606.857905ms ago: executing program 3 (id=4452): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='ns\x00') getdents64(r1, &(0x7f0000000200)=""/119, 0x77) 605.998115ms ago: executing program 0 (id=4453): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f000000a100)="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", 0x2000, &(0x7f0000000200)={&(0x7f0000000400)={0x50, 0x0, 0x100000001, {0x7, 0x28, 0x7a, 0x2143040, 0x4, 0x81, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004080)="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", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x78, 0x0, 0x7, {0xffffffffffffbffe, 0x1, 0x0, {0x7, 0x68ec2dea, 0x1, 0x201, 0x6dc6, 0x7651, 0x5, 0x7, 0xe000, 0x601d824b499141fd, 0xcd36, 0xee01, 0xffffffffffffffff, 0x5, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f000000e140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xffffffffffffffda, r1}, 0x10) chdir(&(0x7f0000000140)='./file0\x00') 484.158208ms ago: executing program 1 (id=4454): syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r6 = dup(r0) syz_ublk_setup_queues(r6, r5, &(0x7f0000000180)={0x0, 0x3e80, 0x800, 0x1, 0x32c, 0x0, r1}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x40, 0x10001, 0x2a5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x10000, 0x7, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbe, 0x0, r1}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 481.733698ms ago: executing program 0 (id=4462): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ed) r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, 0x0}, 0x30004040) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f00000000c0), 0xfe11) close(r0) 480.696008ms ago: executing program 3 (id=4455): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x800) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xffffffffffff]}, 0x0, 0x8) r2 = gettid() timer_create(0x3, &(0x7f0000000040)={0x0, 0x15, 0x4, @tid=r2}, &(0x7f0000000080)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) 386.51785ms ago: executing program 0 (id=4456): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$inet6(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)='3', 0x1}], 0x1}, 0x20003801) close_range(r0, 0xffffffffffffffff, 0x0) 302.089012ms ago: executing program 3 (id=4457): r0 = socket$kcm(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 0s ago: executing program 1 (id=4458): r0 = memfd_create(&(0x7f0000000480)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4', 0x0) ftruncate(r0, 0x8800000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) r3 = dup3(r2, r1, 0x0) sendfile(r3, r0, 0x0, 0x1000009) kernel console output (not intermixed with test programs): c000003e syscall=10 compat=0 ip=0x7f0c83f9df57 code=0x7ffc0000 [ 231.551972][ T28] audit: type=1326 audit(1788419723.947:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8417 comm="syz.1.840" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f0c83f5ae51 code=0x7ffc0000 [ 231.736108][ T8426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.833'. [ 231.785353][ T8426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.833'. [ 232.044261][ T8435] binder: 8431:8435 ioctl c0306201 200000000480 returned -14 [ 232.762610][ T8458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.850'. [ 232.928180][ T8462] loop3: detected capacity change from 0 to 1024 [ 232.951704][ T8462] EXT4-fs: Ignoring removed bh option [ 233.024225][ T8462] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.180127][ T8462] EXT4-fs (loop3): shut down requested (1) [ 233.256870][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.439329][ T8471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.853'. [ 234.112710][ T8483] netlink: 'syz.3.857': attribute type 15 has an invalid length. [ 234.162842][ T8483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.857'. [ 234.213376][ T8483] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 234.222285][ T8483] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 234.231759][ T8483] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 234.240996][ T8483] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 234.582116][ T8486] loop0: detected capacity change from 0 to 32768 [ 234.612008][ T8486] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 234.620903][ T8486] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 234.667018][ T8486] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 234.695022][ T6049] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 234.713831][ T6049] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 234.727589][ T8483] netlink: 'syz.3.857': attribute type 15 has an invalid length. [ 234.754868][ T8483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.857'. [ 234.852555][ T6049] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 138ms [ 234.871390][ T6049] gfs2: fsid=syz:syz.0: jid=0: Done [ 234.892871][ T8486] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 235.078738][ T8486] gfs2: fsid=syz:syz.0: found 1 quota changes [ 235.264246][ T8486] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 235.264246][ T8486] inode = 11 2339 [ 235.264246][ T8486] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 421 [ 235.284275][ T8486] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:4 m:20 p:1 [ 235.294486][ T8486] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:8486 [syz.0.859] gfs2_quota_sync+0x411/0x5a0 [ 235.305307][ T8486] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 235.313506][ T8486] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 235.539838][ T8503] process 'syz.1.866' launched './file0' with NULL argv: empty string added [ 235.588726][ T8505] loop4: detected capacity change from 0 to 1024 [ 235.990166][ T8517] overlayfs: failed to clone upperpath [ 236.164622][ T8523] debugfs: Directory 'netdev:syzkaller0' with parent 'phy1' already present! [ 236.483625][ T6052] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 236.757397][ T6052] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 237.278055][ T6052] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 237.514527][ T8530] ceph: No mds server is up or the cluster is laggy [ 237.839914][ T5778] Bluetooth: hci1: command 0x0406 tx timeout [ 238.617094][ T8553] loop4: detected capacity change from 0 to 128 [ 238.667255][ T8553] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 238.692079][ T8553] ext4 filesystem being mounted at /155/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 238.822634][ T6489] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 239.671789][ T8576] all: renamed from bridge_slave_0 (while UP) [ 239.829920][ T6052] libceph: connect (2)0.0.0.0:6789 error -22 [ 239.856048][ T6052] libceph: ceph_tcp_connect failed: -22 [ 239.883242][ T6052] libceph: mon0 (2)0.0.0.0:6789 connect error [ 239.986186][ T8590] input: syz1 as /devices/virtual/input/input8 [ 240.155491][ T6052] libceph: connect (2)0.0.0.0:6789 error -22 [ 240.170793][ T6052] libceph: ceph_tcp_connect failed: -22 [ 240.183600][ T6052] libceph: mon0 (2)0.0.0.0:6789 connect error [ 240.403365][ T8486] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 240.413975][ T8486] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 240.424197][ T8486] gfs2: fsid=syz:syz.0: File system withdrawn [ 240.430931][ T8486] CPU: 0 PID: 8486 Comm: syz.0.859 Not tainted syzkaller #0 [ 240.438508][ T8486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 240.449187][ T8486] Call Trace: [ 240.452700][ T8486] [ 240.455955][ T8486] dump_stack_lvl+0x18c/0x250 [ 240.462173][ T8486] ? show_regs_print_info+0x20/0x20 [ 240.467617][ T8486] ? load_image+0x420/0x420 [ 240.472601][ T8486] ? kobject_uevent_env+0x368/0x890 [ 240.477965][ T8486] gfs2_withdraw+0xe16/0x1400 [ 240.482850][ T8486] ? gfs2_lm+0x240/0x240 [ 240.487134][ T8486] ? wake_bit_function+0x200/0x200 [ 240.492982][ T8486] ? gfs2_consist_inode_i+0xf5/0x110 [ 240.498567][ T8486] gfs2_inode_refresh+0xb3c/0x11a0 [ 240.505135][ T8486] ? gfs2_inode_metasync+0xf0/0xf0 [ 240.510837][ T8486] ? gfs2_glock_nq+0xe2e/0x1440 [ 240.516534][ T8486] gfs2_instantiate+0x162/0x220 [ 240.521988][ T8486] gfs2_glock_wait+0x1d4/0x2a0 [ 240.528544][ T8486] do_sync+0x4b8/0xd90 [ 240.533637][ T8486] ? gfs2_quota_sync+0x411/0x5a0 [ 240.539053][ T8486] ? bh_get+0x760/0x760 [ 240.543620][ T8486] ? __lock_acquire+0x7d80/0x7d80 [ 240.550285][ T8486] ? do_raw_spin_lock+0x11f/0x2b0 [ 240.556318][ T8486] ? gfs2_quota_sync+0x411/0x5a0 [ 240.561552][ T8486] ? do_raw_spin_unlock+0x121/0x230 [ 240.567281][ T8486] gfs2_quota_sync+0x411/0x5a0 [ 240.572450][ T8486] __se_sys_quotactl_fd+0x2a0/0x410 [ 240.578038][ T8486] do_syscall_64+0x55/0xb0 [ 240.583898][ T8486] ? clear_bhb_loop+0x40/0x90 [ 240.590020][ T8486] ? clear_bhb_loop+0x40/0x90 [ 240.595271][ T8486] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 240.602137][ T8486] RIP: 0033:0x7f0ae039e159 [ 240.606870][ T8486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.629739][ T8486] RSP: 002b:00007f0ae1323028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bb [ 240.638275][ T8486] RAX: ffffffffffffffda RBX: 00007f0ae0625fa0 RCX: 00007f0ae039e159 [ 240.646490][ T8486] RDX: 0000000000000000 RSI: ffffffff80000100 RDI: 0000000000000004 [ 240.654494][ T8486] RBP: 00007f0ae0435024 R08: 0000000000000000 R09: 0000000000000000 [ 240.662805][ T8486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.670925][ T8486] R13: 00007f0ae0626038 R14: 00007f0ae0625fa0 R15: 00007ffedfc3e0f8 [ 240.679746][ T8486] [ 240.706597][ T6049] libceph: connect (2)0.0.0.0:6789 error -22 [ 240.713105][ T6049] libceph: ceph_tcp_connect failed: -22 [ 240.737337][ T6049] libceph: mon0 (2)0.0.0.0:6789 connect error [ 240.879820][ T8583] ceph: No mds server is up or the cluster is laggy [ 242.120888][ T8601] loop0: detected capacity change from 0 to 131072 [ 242.155042][ T8601] F2FS-fs (loop0): invalid crc value [ 242.189527][ T8601] F2FS-fs (loop0): Found nat_bits in checkpoint [ 242.276179][ T8601] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 242.665351][ T6049] libceph: connect (1)[c::]:6789 error -101 [ 242.681399][ T6049] libceph: mon0 (1)[c::]:6789 connect error [ 242.736253][ T6049] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 242.965345][ T6049] libceph: connect (1)[c::]:6789 error -101 [ 242.993065][ T6049] libceph: mon0 (1)[c::]:6789 connect error [ 243.035531][ T6052] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 243.370418][ T8616] ceph: No mds server is up or the cluster is laggy [ 243.390054][ T8611] ceph: No mds server is up or the cluster is laggy [ 243.445173][ T6052] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 243.666704][ T6052] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.688435][ T6052] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 243.741365][ T6052] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 243.773123][ T6052] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 243.826601][ T6052] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 243.877256][ T6052] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.031303][ T8642] fuse: Bad value for 'fd' [ 244.987116][ T6052] [drm] Initialized gud 1.0.0 20200422 for 4-1:1.0 on minor 2 [ 245.117823][ T8664] netlink: 'syz.0.932': attribute type 1 has an invalid length. [ 245.233619][ T8666] netlink: 'syz.4.933': attribute type 19 has an invalid length. [ 245.260558][ T6052] gud 4-1:1.0: [drm] fb1: guddrmfb frame buffer device [ 245.300894][ T8666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.933'. [ 245.315024][ T6052] usb 4-1: USB disconnect, device number 6 [ 245.404832][ T8666] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.414089][ T8666] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.423061][ T8666] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.431976][ T8666] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.638197][ T8671] loop0: detected capacity change from 0 to 256 [ 245.679295][ T8666] netlink: 'syz.4.933': attribute type 19 has an invalid length. [ 245.699038][ T8666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.933'. [ 245.743327][ T8671] FAT-fs (loop0): Directory bread(block 64) failed [ 245.754832][ T8671] FAT-fs (loop0): Directory bread(block 65) failed [ 245.771861][ T8671] FAT-fs (loop0): Directory bread(block 66) failed [ 245.784532][ T8671] FAT-fs (loop0): Directory bread(block 67) failed [ 245.801869][ T8671] FAT-fs (loop0): Directory bread(block 68) failed [ 245.811933][ T8671] FAT-fs (loop0): Directory bread(block 69) failed [ 245.842482][ T8671] FAT-fs (loop0): Directory bread(block 70) failed [ 245.870905][ T8671] FAT-fs (loop0): Directory bread(block 71) failed [ 245.904772][ T8671] FAT-fs (loop0): Directory bread(block 72) failed [ 245.911664][ T8671] FAT-fs (loop0): Directory bread(block 73) failed [ 246.056830][ T8675] netlink: 24 bytes leftover after parsing attributes in process `syz.4.936'. [ 246.189595][ T8671] syz.0.935: attempt to access beyond end of device [ 246.189595][ T8671] loop0: rw=2049, sector=1240, nr_sectors = 32 limit=256 [ 246.253971][ T8671] syz.0.935: attempt to access beyond end of device [ 246.253971][ T8671] loop0: rw=34817, sector=1240, nr_sectors = 32 limit=256 [ 246.329470][ T8670] syz.0.935: attempt to access beyond end of device [ 246.329470][ T8670] loop0: rw=2049, sector=1224, nr_sectors = 16 limit=256 [ 247.116884][ T8686] loop4: detected capacity change from 0 to 4096 [ 247.494340][ T8686] ntfs: volume version 3.1. [ 248.086084][ T4476] __ntfs_error: 300 callbacks suppressed [ 248.086105][ T4476] ntfs: (device loop4): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 248.312173][ T8716] 9pnet_fd: Insufficient options for proto=fd [ 248.845080][ T8732] loop4: detected capacity change from 0 to 1024 [ 248.898831][ T8732] EXT4-fs: Ignoring removed orlov option [ 249.002071][ T8732] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.108482][ T8745] veth1_to_bond: entered allmulticast mode [ 249.135695][ T8745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.962'. [ 249.281973][ T8732] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.957: Invalid inode bitmap blk 17555634438557414908 in block_group 0 [ 249.425758][ T8745] bond0: (slave bond_slave_1): Releasing backup interface [ 249.532365][ T6489] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.825933][ T8792] 9pnet_fd: Insufficient options for proto=fd [ 251.728445][ T8822] jffs2: notice: (8822) jffs2_build_xattr_subsystem: complete building xattr subsystem, 8 of xdatum (0 unchecked, 8 orphan) and 8 of xref (2 dead, 6 orphan) found. [ 251.773611][ T6052] libceph: connect (2)0.0.0.0:6789 error -22 [ 251.782127][ T6052] libceph: ceph_tcp_connect failed: -22 [ 251.798453][ T6052] libceph: mon0 (2)0.0.0.0:6789 connect error [ 252.074856][ T6052] libceph: connect (2)0.0.0.0:6789 error -22 [ 252.081423][ T6052] libceph: ceph_tcp_connect failed: -22 [ 252.087303][ T6052] libceph: mon0 (2)0.0.0.0:6789 connect error [ 252.597917][ T6052] libceph: connect (2)0.0.0.0:6789 error -22 [ 252.617692][ T6052] libceph: ceph_tcp_connect failed: -22 [ 252.637450][ T6052] libceph: mon0 (2)0.0.0.0:6789 connect error [ 252.794586][ T8825] ceph: No mds server is up or the cluster is laggy [ 253.091388][ T8848] loop3: detected capacity change from 0 to 32768 [ 253.116681][ T8848] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 253.170089][ T8848] XFS (loop3): Ending clean mount [ 253.236159][ T5776] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 253.950774][ T6052] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 254.069075][ T6051] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 254.164590][ T6052] usb 4-1: Using ep0 maxpacket: 16 [ 254.176439][ T6052] usb 4-1: unable to get BOS descriptor or descriptor too short [ 254.191314][ T6052] usb 4-1: config 1 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 254.208467][ T6052] usb 4-1: config 1 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 254.234282][ T6052] usb 4-1: config 1 interface 0 has no altsetting 0 [ 254.250026][ T6052] usb 4-1: language id specifier not provided by device, defaulting to English [ 254.272913][ T6052] usb 4-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.40 [ 254.289063][ T6052] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.317076][ T6052] usb 4-1: Product: syz [ 254.329275][ T6052] usb 4-1: SerialNumber: syz [ 254.343702][ T8887] loop0: detected capacity change from 0 to 256 [ 254.351059][ T6051] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 254.421143][ T8887] FAT-fs (loop0): Directory bread(block 64) failed [ 254.435026][ T8887] FAT-fs (loop0): Directory bread(block 65) failed [ 254.449201][ T8887] FAT-fs (loop0): Directory bread(block 66) failed [ 254.463668][ T8887] FAT-fs (loop0): Directory bread(block 67) failed [ 254.479336][ T8887] FAT-fs (loop0): Directory bread(block 68) failed [ 254.495847][ T8887] FAT-fs (loop0): Directory bread(block 69) failed [ 254.513701][ T8887] FAT-fs (loop0): Directory bread(block 70) failed [ 254.527959][ T8887] FAT-fs (loop0): Directory bread(block 71) failed [ 254.543709][ T8887] FAT-fs (loop0): Directory bread(block 72) failed [ 254.559538][ T8887] FAT-fs (loop0): Directory bread(block 73) failed [ 254.744280][ T8887] syz.0.1015: attempt to access beyond end of device [ 254.744280][ T8887] loop0: rw=524288, sector=1768, nr_sectors = 4 limit=256 [ 254.777650][ T8887] syz.0.1015: attempt to access beyond end of device [ 254.777650][ T8887] loop0: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 254.808385][ T28] audit: type=1800 audit(1788419747.427:539): pid=8887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1015" name="file0" dev="loop0" ino=1048621 res=0 errno=0 [ 254.876587][ T6051] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 255.114671][ T8879] ceph: No mds server is up or the cluster is laggy [ 255.177337][ T6052] usbhid 4-1:1.0: can't add hid device: -71 [ 255.201262][ T6052] usbhid: probe of 4-1:1.0 failed with error -71 [ 255.235919][ T6052] usb 4-1: USB disconnect, device number 7 [ 255.366178][ T8904] overlayfs: failed to clone upperpath [ 255.417239][ T8906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1025'. [ 255.614562][ T6051] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 255.810222][ T6051] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.845914][ T6051] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 255.881700][ T6051] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 255.924968][ T6051] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.961760][ T6051] usb 1-1: Product: syz [ 255.974516][ T6051] usb 1-1: Manufacturer: syz [ 255.979305][ T6051] usb 1-1: SerialNumber: syz [ 256.048655][ T6051] cdc_mbim 1-1:1.0: skipping garbage [ 256.238383][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.249747][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.263978][ T8902] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 256.277982][ T8927] netlink: 51 bytes leftover after parsing attributes in process `syz.3.1034'. [ 256.399369][ T1141] wlan1: Trigger new scan to find an IBSS to join [ 256.900418][ T8902] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 256.931765][ T6051] cdc_mbim 1-1:1.0: setting rx_max = 16384 [ 257.141185][ T6051] cdc_mbim 1-1:1.0: setting tx_max = 16384 [ 257.159174][ T6051] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 257.189940][ T6051] wwan wwan0: port wwan0mbim0 attached [ 257.230835][ T6051] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 0e:4e:0f:f6:d9:2d [ 257.254588][ T6052] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 257.457029][ T6052] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.496126][ T6052] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.530783][ T6052] usb 5-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 257.543525][ T6051] usb 1-1: USB disconnect, device number 5 [ 257.561556][ T6051] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 257.575844][ T6052] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.711453][ T6051] wwan wwan0: port wwan0mbim0 disconnected [ 258.072637][ T6052] wacom 0003:056A:033B.0004: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 258.172181][ T6052] wacom 0003:056A:033B.0004: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.4-1/input0 [ 258.204184][ T8957] loop3: detected capacity change from 0 to 2048 [ 258.249564][ T6052] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:056A:033B.0004/input/input9 [ 258.385194][ T8957] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.541276][ T6052] usb 5-1: USB disconnect, device number 5 [ 258.606129][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.355599][ T1141] wlan1: Trigger new scan to find an IBSS to join [ 259.447320][ T8993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1050'. [ 259.641151][ T8993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1050'. [ 260.153222][ T9012] sd 0:0:1:0: device reset [ 260.487708][ T9020] bridge1: entered promiscuous mode [ 260.508616][ T9020] bridge1: entered allmulticast mode [ 260.894584][ T6052] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 261.080799][ T6052] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 261.090418][ T6052] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.099019][ T6052] usb 1-1: Product: syz [ 261.103465][ T6052] usb 1-1: Manufacturer: syz [ 261.108524][ T6052] usb 1-1: SerialNumber: syz [ 261.534964][ T6052] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 261.910993][ T9046] sctp: [Deprecated]: syz.1.1069 (pid 9046) Use of struct sctp_assoc_value in delayed_ack socket option. [ 261.910993][ T9046] Use struct sctp_sack_info instead [ 262.394559][ T1080] wlan1: Trigger new scan to find an IBSS to join [ 262.894527][ T6049] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 263.084512][ T6049] usb 4-1: Using ep0 maxpacket: 8 [ 263.096642][ T6049] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 263.115760][ T6049] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 263.137336][ T6049] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 263.154206][ T6049] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.172461][ T6049] usb 4-1: Product: syz [ 263.181328][ T6049] usb 4-1: Manufacturer: syz [ 263.190638][ T6049] usb 4-1: SerialNumber: syz [ 263.290922][ T1141] wlan1: Creating new IBSS network, BSSID aa:83:1c:ac:28:a9 [ 263.481657][ T9068] FAULT_INJECTION: forcing a failure. [ 263.481657][ T9068] name failslab, interval 1, probability 0, space 0, times 0 [ 263.510040][ T9068] CPU: 0 PID: 9068 Comm: syz.4.1079 Not tainted syzkaller #0 [ 263.517987][ T9068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 263.528160][ T9068] Call Trace: [ 263.531460][ T9068] [ 263.534424][ T9068] dump_stack_lvl+0x18c/0x250 [ 263.539159][ T9068] ? show_regs_print_info+0x20/0x20 [ 263.544399][ T9068] ? load_image+0x420/0x420 [ 263.548952][ T9068] ? __might_sleep+0xe0/0xe0 [ 263.553647][ T9068] ? __lock_acquire+0x7d80/0x7d80 [ 263.558693][ T9068] ? _raw_spin_lock_irq+0xbb/0xf0 [ 263.563843][ T9068] should_fail_ex+0x394/0x4c0 [ 263.568549][ T9068] should_failslab+0x9/0x20 [ 263.573075][ T9068] slab_pre_alloc_hook+0x59/0x300 [ 263.578129][ T9068] kmem_cache_alloc+0x5a/0x2c0 [ 263.582942][ T9068] ? copy_pid_ns+0x282/0x9d0 [ 263.587595][ T9068] copy_pid_ns+0x282/0x9d0 [ 263.592057][ T9068] ? cmp_extents_reverse+0x90/0x90 [ 263.597326][ T9068] ? copy_ipcs+0x92/0x500 [ 263.601719][ T9068] ? copy_utsname+0x97/0x430 [ 263.606444][ T9068] create_new_namespaces+0x2a6/0x700 [ 263.612148][ T9068] unshare_nsproxy_namespaces+0x11a/0x160 [ 263.617934][ T9068] ksys_unshare+0x4fa/0x8f0 [ 263.622570][ T9068] ? sighand_ctor+0x50/0x50 [ 263.627160][ T9068] ? lock_chain_count+0x20/0x20 [ 263.632345][ T9068] ? syscall_enter_from_user_mode+0x25/0x80 [ 263.638379][ T9068] __x64_sys_unshare+0x38/0x40 [ 263.643367][ T9068] do_syscall_64+0x55/0xb0 [ 263.647897][ T9068] ? clear_bhb_loop+0x40/0x90 [ 263.652766][ T9068] ? clear_bhb_loop+0x40/0x90 [ 263.657468][ T9068] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 263.663382][ T9068] RIP: 0033:0x7f881339e159 [ 263.667817][ T9068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.687444][ T9068] RSP: 002b:00007f881433b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 263.695897][ T9068] RAX: ffffffffffffffda RBX: 00007f8813625fa0 RCX: 00007f881339e159 [ 263.704233][ T9068] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 263.712655][ T9068] RBP: 00007f8813435024 R08: 0000000000000000 R09: 0000000000000000 [ 263.720736][ T9068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.728901][ T9068] R13: 00007f8813626038 R14: 00007f8813625fa0 R15: 00007ffc81e7e3e8 [ 263.737077][ T9068] [ 263.884271][ T6052] usb 1-1: USB disconnect, device number 6 [ 263.919251][ T6052] usblp0: removed [ 264.253585][ T6049] usb 4-1: unit 6 not found! [ 264.268007][ T6049] usb 4-1: unit 0 not found! [ 264.353555][ T6049] usb 4-1: USB disconnect, device number 8 [ 264.545632][ T9085] capability: warning: `syz.3.1087' uses deprecated v2 capabilities in a way that may be insecure [ 264.902537][ T9092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1089'. [ 265.338454][ T9083] loop0: detected capacity change from 0 to 40427 [ 265.384545][ T9083] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 265.424807][ T9083] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 265.474825][ T9083] F2FS-fs (loop0): invalid crc value [ 265.513116][ T9083] F2FS-fs (loop0): Found nat_bits in checkpoint [ 265.780821][ T9083] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 265.810579][ T9083] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 266.216194][ T5775] syz-executor: attempt to access beyond end of device [ 266.216194][ T5775] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 266.287556][ T5775] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 266.351291][ T9117] loop4: detected capacity change from 0 to 2048 [ 266.462840][ T9117] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.544796][ T9117] ext4 filesystem being mounted at /200/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 266.601853][ T9101] loop3: detected capacity change from 0 to 32768 [ 266.763661][ T9117] fs-verity: sha256 using implementation "sha256-avx2" [ 266.841012][ T9117] fs-verity (loop4, inode 16): fs-verity keyring is empty, rejecting signed file! [ 267.050245][ T6489] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.178183][ T9146] input: syz0 as /devices/virtual/input/input12 [ 268.730756][ T9160] loop0: detected capacity change from 0 to 2048 [ 268.793278][ T9160] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 268.996045][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 269.017070][ T9170] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1119'. [ 269.305264][ T9182] overlayfs: failed to resolve './file0': -2 [ 269.898575][ T9205] loop0: detected capacity change from 0 to 512 [ 269.922458][ T9205] EXT4-fs: Ignoring removed oldalloc option [ 269.944967][ T9205] EXT4-fs (loop0): Test dummy encryption mode enabled [ 270.023149][ T9205] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.169309][ T9214] futex_wake_op: syz.0.1131 tries to shift op by -1; fix this program [ 270.289532][ T9205] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 270.471281][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.826498][ T9233] syzkaller1: entered allmulticast mode [ 272.308601][ T9264] FAULT_INJECTION: forcing a failure. [ 272.308601][ T9264] name failslab, interval 1, probability 0, space 0, times 0 [ 272.378076][ T9264] CPU: 0 PID: 9264 Comm: syz.0.1155 Not tainted syzkaller #0 [ 272.385596][ T9264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 272.396347][ T9264] Call Trace: [ 272.399742][ T9264] [ 272.402782][ T9264] dump_stack_lvl+0x18c/0x250 [ 272.407578][ T9264] ? show_regs_print_info+0x20/0x20 [ 272.413089][ T9264] ? load_image+0x420/0x420 [ 272.417736][ T9264] ? __lock_acquire+0x7d80/0x7d80 [ 272.423034][ T9264] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 272.430106][ T9264] ? __lock_acquire+0x7d80/0x7d80 [ 272.435526][ T9264] should_fail_ex+0x394/0x4c0 [ 272.441283][ T9264] should_failslab+0x9/0x20 [ 272.446068][ T9264] slab_pre_alloc_hook+0x59/0x300 [ 272.451450][ T9264] ? _raw_spin_unlock_irq+0x2e/0x50 [ 272.456928][ T9264] ? alloc_mnt_ns+0xaf/0x3b0 [ 272.461738][ T9264] __kmem_cache_alloc_node+0x53/0x250 [ 272.467543][ T9264] ? alloc_mnt_ns+0xaf/0x3b0 [ 272.472260][ T9264] kmalloc_trace+0x2a/0xe0 [ 272.476889][ T9264] alloc_mnt_ns+0xaf/0x3b0 [ 272.481433][ T9264] __se_sys_open_tree+0x32a/0x880 [ 272.486534][ T9264] ? lock_chain_count+0x20/0x20 [ 272.491419][ T9264] ? __x64_sys_open_tree+0x80/0x80 [ 272.496726][ T9264] ? lockdep_hardirqs_on+0x98/0x150 [ 272.501952][ T9264] do_syscall_64+0x55/0xb0 [ 272.506646][ T9264] ? clear_bhb_loop+0x40/0x90 [ 272.511373][ T9264] ? clear_bhb_loop+0x40/0x90 [ 272.516691][ T9264] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 272.522896][ T9264] RIP: 0033:0x7f0ae039e159 [ 272.527455][ T9264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.548048][ T9264] RSP: 002b:00007f0ae1323028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 272.556485][ T9264] RAX: ffffffffffffffda RBX: 00007f0ae0625fa0 RCX: 00007f0ae039e159 [ 272.565012][ T9264] RDX: 0000000000089901 RSI: 0000200000000180 RDI: 0000000000000003 [ 272.573207][ T9264] RBP: 00007f0ae0435024 R08: 0000000000000000 R09: 0000000000000000 [ 272.582002][ T9264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.592023][ T9264] R13: 00007f0ae0626038 R14: 00007f0ae0625fa0 R15: 00007ffedfc3e0f8 [ 272.601140][ T9264] [ 272.604843][ C0] vkms_vblank_simulate: vblank timer overrun [ 272.713757][ T9255] loop4: detected capacity change from 0 to 32768 [ 272.804703][ T9255] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1151 (9255) [ 272.885682][ T9266] netlink: 'syz.1.1157': attribute type 1 has an invalid length. [ 272.944514][ T9255] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 272.974590][ T9255] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 273.004172][ T9255] BTRFS info (device loop4): using free space tree [ 273.015059][ T9266] 8021q: adding VLAN 0 to HW filter on device bond2 [ 273.031343][ T9271] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.055820][ T9271] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.064920][ T9271] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.074579][ T9271] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.087545][ T9271] bond2: (slave geneve2): making interface the new active one [ 273.100293][ T9271] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 273.211882][ T9255] BTRFS info (device loop4): enabling ssd optimizations [ 273.244232][ T9255] BTRFS info (device loop4): auto enabling async discard [ 273.501853][ T9294] tipc: Started in network mode [ 273.528684][ T9294] tipc: Node identity ac14140f, cluster identity 4711 [ 273.559939][ T9294] tipc: Enabled bearer , priority 10 [ 273.766376][ T4476] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 274.094637][ T6048] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 274.299838][ T6048] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 274.321727][ T6048] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.348202][ T6048] usb 4-1: Product: syz [ 274.361467][ T6048] usb 4-1: Manufacturer: syz [ 274.376717][ T6048] usb 4-1: SerialNumber: syz [ 274.427803][ T6048] ums-karma 4-1:1.0: USB Mass Storage device detected [ 274.489343][ T6048] ums-karma 4-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 274.489343][ T6048] Please send a copy of this message to and [ 274.679189][ T6049] tipc: Node number set to 2886997007 [ 274.719377][ T6489] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 274.893267][ T6048] scsi host1: usb-storage 4-1:1.0 [ 275.021725][ T28] audit: type=1326 audit(1788419767.637:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.1.1166" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c83f9e159 code=0x7ffc0000 [ 275.113024][ T28] audit: type=1326 audit(1788419767.637:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.1.1166" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c83f9e159 code=0x7ffc0000 [ 275.144014][ T28] audit: type=1326 audit(1788419767.637:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.1.1166" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c83f9e159 code=0x7ffc0000 [ 275.174107][ T28] audit: type=1326 audit(1788419767.637:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.1.1166" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c83f9e159 code=0x7ffc0000 [ 275.191181][ T6052] usb 4-1: USB disconnect, device number 9 [ 275.205679][ T28] audit: type=1326 audit(1788419767.637:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.1.1166" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f0c83f9e159 code=0x7ffc0000 [ 275.205736][ T28] audit: type=1326 audit(1788419767.687:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.1.1166" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0c83f5e98e code=0x7ffc0000 [ 275.205782][ T28] audit: type=1326 audit(1788419767.697:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.1.1166" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0c83f5e98e code=0x7ffc0000 [ 275.205827][ T28] audit: type=1326 audit(1788419767.707:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.1.1166" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0c83f5e98e code=0x7ffc0000 [ 275.205873][ T28] audit: type=1326 audit(1788419767.707:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.1.1166" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0c83f5e98e code=0x7ffc0000 [ 275.205918][ T28] audit: type=1326 audit(1788419767.717:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.1.1166" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0c83f5e98e code=0x7ffc0000 [ 276.837593][ T9341] 9pnet_fd: Insufficient options for proto=fd [ 277.136853][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 277.149992][ T5778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 277.160675][ T5778] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 277.189568][ T5778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 277.198951][ T5778] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 277.206738][ T5778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 277.519482][ T9346] chnl_net:caif_netlink_parms(): no params data found [ 277.694532][ T9346] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.703558][ T9346] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.711994][ T9346] bridge_slave_0: entered allmulticast mode [ 277.734022][ T9346] bridge_slave_0: entered promiscuous mode [ 277.756434][ T9346] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.764342][ T9346] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.772587][ T9346] bridge_slave_1: entered allmulticast mode [ 277.780871][ T9346] bridge_slave_1: entered promiscuous mode [ 277.821723][ T9346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.835679][ T9346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.884308][ T9346] team0: Port device team_slave_0 added [ 277.895523][ T9346] team0: Port device team_slave_1 added [ 277.932769][ T9346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.940323][ T9346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.969393][ T9346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.990726][ T9346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.003350][ T9346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.036141][ T9346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.131530][ T9346] hsr_slave_0: entered promiscuous mode [ 278.149464][ T9346] hsr_slave_1: entered promiscuous mode [ 278.160377][ T9346] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 278.180359][ T9346] Cannot create hsr debugfs directory [ 278.737507][ T9346] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 278.793513][ T9346] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 278.828187][ T9346] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 278.835943][ T9382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1192'. [ 278.848084][ T9346] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 279.209761][ T9346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.275918][ T5778] Bluetooth: hci1: command tx timeout [ 279.292224][ T9346] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.334755][ T3445] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.343219][ T3445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.363903][ T3445] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.371408][ T3445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.722165][ T9394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1196'. [ 279.781100][ T9394] hsr_slave_0: left promiscuous mode [ 279.828389][ T9394] hsr_slave_1: left promiscuous mode [ 279.851493][ T9396] loop0: detected capacity change from 0 to 512 [ 279.908913][ T9396] EXT4-fs error (device loop0): ext4_iget_extra_inode:4740: inode #15: comm syz.0.1198: corrupted in-inode xattr: invalid ea_ino [ 279.937817][ T9396] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.1198: couldn't read orphan inode 15 (err -117) [ 279.981299][ T9396] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.990162][ T9346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.289987][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.529902][ T9346] veth0_vlan: entered promiscuous mode [ 280.557032][ T9346] veth1_vlan: entered promiscuous mode [ 280.639657][ T9346] veth0_macvtap: entered promiscuous mode [ 280.673835][ T9346] veth1_macvtap: entered promiscuous mode [ 280.712307][ T9346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.733991][ T9346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.766356][ T9346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.793349][ T9346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.810110][ T9346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.824143][ T9346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.847961][ T9346] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.862310][ T9346] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.879746][ T9346] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.889512][ T9346] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.355830][ T5084] Bluetooth: hci1: command tx timeout [ 281.755030][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.763732][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.888364][ T3445] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.900004][ T3445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.107286][ T28] kauditd_printk_skb: 89 callbacks suppressed [ 282.107304][ T28] audit: type=1326 audit(1788419774.727:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9434 comm="syz.5.1177" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f03bb19e159 code=0x0 [ 283.444519][ T5084] Bluetooth: hci1: command tx timeout [ 284.144998][ T9467] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1222'. [ 284.934639][ T9487] loop0: detected capacity change from 0 to 2048 [ 285.004532][ T5774] blk_print_req_error: 170 callbacks suppressed [ 285.004553][ T5774] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 285.264074][ T9495] loop5: detected capacity change from 0 to 512 [ 285.307831][ T9495] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 285.319308][ T9495] EXT4-fs (loop5): invalid journal inode [ 285.326347][ T9495] EXT4-fs (loop5): can't get journal size [ 285.363311][ T9495] EXT4-fs (loop5): 1 truncate cleaned up [ 285.398945][ T9495] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.524496][ T5084] Bluetooth: hci1: command tx timeout [ 285.723214][ T9346] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.975567][ T9502] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13 [ 286.362393][ T9512] loop5: detected capacity change from 0 to 32768 [ 286.380285][ T9512] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10 [ 286.477329][ T5774] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10 [ 286.847796][ T9531] loop3: detected capacity change from 0 to 128 [ 287.151943][ T9539] IPVS: Error joining to the multicast group [ 287.281871][ T9541] loop0: detected capacity change from 0 to 1024 [ 287.303351][ T9541] EXT4-fs: Ignoring removed orlov option [ 287.361711][ T9541] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.462393][ T9548] netlink: 'syz.5.1255': attribute type 1 has an invalid length. [ 287.585402][ T9541] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.1253: Invalid inode bitmap blk 17555634438557414908 in block_group 0 [ 287.737974][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.044669][ T56] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 288.236959][ T56] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 288.254023][ T56] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 288.297879][ T56] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 288.318210][ T56] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.474724][ T6048] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 288.567328][ T56] usb 6-1: usb_control_msg returned -32 [ 288.580907][ T56] usbtmc 6-1:16.0: can't read capabilities [ 288.674954][ T6048] usb 1-1: Using ep0 maxpacket: 8 [ 288.692311][ T6048] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 288.714639][ T6048] usb 1-1: config 179 has no interface number 0 [ 288.730215][ T6048] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 288.752705][ T6048] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 288.765922][ T6048] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 288.786484][ T9587] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1271'. [ 288.810443][ T6048] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 288.834013][ T6048] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 288.861272][ T6048] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 288.896524][ T6048] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.935678][ T9569] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 290.456150][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 290.464638][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 290.517588][ T6048] usb 1-1: USB disconnect, device number 7 [ 290.798881][ T56] usb 6-1: USB disconnect, device number 2 [ 290.927156][ T6049] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 291.136930][ T6049] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.179334][ T6049] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.214472][ T6049] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 291.258870][ T6049] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 291.294506][ T6049] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.330180][ T6049] usb 4-1: config 0 descriptor?? [ 291.802824][ T6049] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 291.862258][ T6049] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 292.032984][ T9641] tipc: Started in network mode [ 292.051147][ T9641] tipc: Node identity ac1414aa, cluster identity 4711 [ 292.058503][ T9641] tipc: New replicast peer: 172.20.20.187 [ 292.094668][ T9641] tipc: Enabled bearer , priority 10 [ 293.188897][ T56] tipc: Node number set to 2886997162 [ 293.309876][ T6100] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 294.056376][ T6049] usb 4-1: USB disconnect, device number 10 [ 295.506431][ T9698] fuse: Bad value for 'fd' [ 295.631802][ T9701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1323'. [ 296.634922][ T6049] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 296.824572][ T6049] usb 1-1: Using ep0 maxpacket: 16 [ 296.831754][ T6049] usb 1-1: unable to get BOS descriptor or descriptor too short [ 296.845409][ T6049] usb 1-1: config 1 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 296.861632][ T6049] usb 1-1: config 1 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 296.893236][ T6049] usb 1-1: config 1 interface 0 has no altsetting 0 [ 296.915515][ T6049] usb 1-1: language id specifier not provided by device, defaulting to English [ 296.946207][ T6049] usb 1-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.40 [ 296.964454][ T6049] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.989504][ T6049] usb 1-1: Product: syz [ 297.001110][ T9734] loop3: detected capacity change from 0 to 2048 [ 297.008199][ T6049] usb 1-1: SerialNumber: syz [ 297.063889][ T9734] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.265407][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.406275][ T9747] netlink: 'syz.3.1342': attribute type 1 has an invalid length. [ 297.424743][ T9747] netlink: 'syz.3.1342': attribute type 2 has an invalid length. [ 297.437292][ T9747] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1342'. [ 297.858701][ T6049] usbhid 1-1:1.0: can't add hid device: -71 [ 297.880968][ T6049] usbhid: probe of 1-1:1.0 failed with error -71 [ 297.909466][ T6049] usb 1-1: USB disconnect, device number 8 [ 299.106636][ T6052] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 299.304874][ T6052] usb 1-1: Using ep0 maxpacket: 16 [ 299.323939][ T6052] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.354810][ T6052] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 299.392493][ T6052] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 299.413944][ T6052] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.442822][ T6052] usb 1-1: config 0 descriptor?? [ 299.906547][ T6052] HID 045e:07da: Invalid code 65791 type 1 [ 299.954813][ T6052] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0006/input/input14 [ 300.039090][ T6052] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 300.797463][ T6051] usb 1-1: USB disconnect, device number 9 [ 301.315721][ T9851] overlayfs: failed to resolve './file0/file0': -2 [ 301.588998][ T9840] loop3: detected capacity change from 0 to 32768 [ 301.671544][ T9840] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 301.698683][ T9840] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 301.804933][ T9840] XFS (loop3): Ending clean mount [ 301.904799][ T9871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1390'. [ 301.918318][ T9840] XFS (loop3): Quotacheck needed: Please wait. [ 302.079746][ T9840] XFS (loop3): Quotacheck: Done. [ 302.218601][ T5776] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 303.202223][ T9905] netlink: 'syz.3.1406': attribute type 25 has an invalid length. [ 303.222292][ T9905] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1406'. [ 303.242452][ T9905] netlink: 'syz.3.1406': attribute type 25 has an invalid length. [ 303.261334][ T9905] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1406'. [ 303.394524][ T6052] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 303.577637][ T6052] usb 1-1: Using ep0 maxpacket: 32 [ 303.600868][ T6052] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 303.615122][ T9912] tipc: Started in network mode [ 303.620150][ T9912] tipc: Node identity 4, cluster identity 4711 [ 303.635405][ T6052] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.654233][ T9912] tipc: Node number set to 4 [ 303.659577][ T6052] usb 1-1: Product: syz [ 303.665304][ T6052] usb 1-1: Manufacturer: syz [ 303.669974][ T6052] usb 1-1: SerialNumber: syz [ 303.704646][ T6052] usb 1-1: config 0 descriptor?? [ 303.975961][ T6052] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 010 [ 304.122851][ T9928] all: renamed from lo (while UP) [ 304.402193][ T9937] netlink: 'syz.1.1419': attribute type 12 has an invalid length. [ 304.410855][ T9937] netlink: 'syz.1.1419': attribute type 29 has an invalid length. [ 304.418907][ T9937] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1419'. [ 304.428281][ T9937] netlink: 'syz.1.1419': attribute type 1 has an invalid length. [ 304.436919][ T9937] netlink: 'syz.1.1419': attribute type 2 has an invalid length. [ 304.445341][ T9937] netlink: 'syz.1.1419': attribute type 3 has an invalid length. [ 304.453394][ T9937] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1419'. [ 304.613132][ T6051] usb 1-1: USB disconnect, device number 10 [ 304.620330][ T9943] i2c i2c-1: failure sending STOP [ 304.962311][ T9955] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1425'. [ 305.073609][ T9959] netlink: 'syz.5.1427': attribute type 3 has an invalid length. [ 305.549765][ T9977] loop3: detected capacity change from 0 to 2048 [ 305.633657][ T9977] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.660829][ T9977] ext4 filesystem being mounted at /344/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 305.745164][ T9986] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1438'. [ 305.764520][ T6052] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 305.826670][ T9977] fs-verity (loop3, inode 16): fs-verity keyring is empty, rejecting signed file! [ 305.949641][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.978412][ T6052] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.995170][ T6052] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 306.035928][ T6052] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.099056][ T6052] usb 1-1: config 0 descriptor?? [ 306.113799][ T9992] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 306.198828][ T9994] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1441'. [ 306.230990][ T9994] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1441'. [ 306.369240][ T6052] usbhid 1-1:0.0: can't add hid device: -71 [ 306.396671][ T6052] usbhid: probe of 1-1:0.0 failed with error -71 [ 306.425010][ T6052] usb 1-1: USB disconnect, device number 11 [ 306.455236][T10000] input: syz0 as /devices/virtual/input/input15 [ 306.851629][T10011] overlayfs: failed to clone upperpath [ 307.034648][ T6052] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 307.224449][ T6052] usb 1-1: Using ep0 maxpacket: 32 [ 307.238213][ T6052] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.256848][ T6052] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 307.276715][ T6052] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.299879][ T6052] usb 1-1: config 0 descriptor?? [ 307.315645][ T6052] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 307.357179][ T6052] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 307.828630][ T6048] usb 1-1: USB disconnect, device number 12 [ 307.841033][ T6048] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 308.085620][T10041] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.093571][T10041] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.168930][T10055] loop3: detected capacity change from 0 to 512 [ 308.184962][T10055] EXT4-fs: Ignoring removed oldalloc option [ 308.200216][T10055] EXT4-fs (loop3): Test dummy encryption mode enabled [ 308.270050][T10055] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.346146][T10055] futex_wake_op: syz.3.1464 tries to shift op by -1; fix this program [ 308.443892][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.806285][T10041] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.855523][T10041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.169047][T10041] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.178844][T10041] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.188508][T10041] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.198548][T10041] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.812414][T10101] loop0: detected capacity change from 0 to 40427 [ 310.855950][T10101] F2FS-fs (loop0): invalid crc value [ 310.882177][T10101] F2FS-fs (loop0): Found nat_bits in checkpoint [ 311.041791][T10101] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 311.182220][T10101] syz.0.1483: attempt to access beyond end of device [ 311.182220][T10101] loop0: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 311.319110][T10101] syz.0.1483: attempt to access beyond end of device [ 311.319110][T10101] loop0: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 311.435851][ T5775] syz-executor: attempt to access beyond end of device [ 311.435851][ T5775] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 311.443315][T10133] netlink: 'syz.5.1495': attribute type 1 has an invalid length. [ 311.467472][ T5775] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 311.526357][T10133] 8021q: adding VLAN 0 to HW filter on device bond1 [ 311.540015][T10137] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.549402][T10137] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.558495][T10137] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.567532][T10137] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.597401][T10137] bond1: (slave geneve2): making interface the new active one [ 311.617135][T10137] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 311.722617][T10137] syz.5.1495 (10137) used greatest stack depth: 20056 bytes left [ 312.393347][T10065] IPVS: starting estimator thread 0... [ 312.499257][T10153] IPVS: using max 18 ests per chain, 43200 per kthread [ 313.034784][T10181] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1515'. [ 313.354942][ T6053] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 313.564859][ T6053] usb 4-1: Using ep0 maxpacket: 8 [ 313.573529][ T6053] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 313.586746][ T6053] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 313.602019][ T6053] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 313.612716][ T6053] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 313.624276][ T6053] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 313.638054][ T6053] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 313.661509][ T6053] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.922571][ T6053] usb 4-1: usb_control_msg returned -32 [ 313.942207][ T6053] usbtmc 4-1:16.0: can't read capabilities [ 314.678835][T10231] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 314.818132][ T28] audit: type=1326 audit(1788419807.437:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10233 comm="syz.1.1535" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c83f9e159 code=0x0 [ 314.877983][ T6053] usb 4-1: USB disconnect, device number 11 [ 315.894277][T10256] 9p: Unknown Cache mode or invalid value 7777777777777777777 [ 316.007948][T10258] loop3: detected capacity change from 0 to 2048 [ 316.103313][T10258] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-00ff07000000 r/w without journal. Quota mode: none. [ 316.143710][T10258] ext4 filesystem being mounted at /365/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 316.335506][T10273] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.1543: bg 0: block 345: padding at end of block bitmap is not set [ 316.419196][T10273] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 129 with error 117 [ 316.437110][T10279] loop0: detected capacity change from 0 to 512 [ 316.446057][T10273] EXT4-fs (loop3): This should not happen!! Data will be lost [ 316.446057][T10273] [ 316.459065][T10279] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 316.475497][T10279] EXT4-fs (loop0): invalid journal inode [ 316.487997][T10279] EXT4-fs (loop0): can't get journal size [ 316.522240][T10279] EXT4-fs (loop0): 1 truncate cleaned up [ 316.545545][T10279] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.761635][ T12] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 15 with error 28 [ 316.777904][ T12] EXT4-fs (loop3): This should not happen!! Data will be lost [ 316.777904][ T12] [ 316.789707][ T12] EXT4-fs (loop3): Total free blocks count 0 [ 316.795934][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.834705][ T12] EXT4-fs (loop3): Free/Dirty block details [ 316.840848][ T12] EXT4-fs (loop3): free_blocks=0 [ 316.858735][ T12] EXT4-fs (loop3): dirty_blocks=80 [ 316.864260][ T12] EXT4-fs (loop3): Block reservation details [ 317.678748][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.685823][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.496195][T10295] loop3: detected capacity change from 0 to 32768 [ 318.540585][T10295] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 318.564589][T10295] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 318.584011][T10295] BTRFS info (device loop3): setting nodatasum [ 318.594127][T10295] BTRFS info (device loop3): force zlib compression, level 3 [ 318.615012][T10295] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 318.634795][T10295] BTRFS info (device loop3): use lzo compression, level 0 [ 318.652312][T10295] BTRFS info (device loop3): turning on flush-on-commit [ 318.677962][T10295] BTRFS info (device loop3): enabling auto defrag [ 318.695523][T10295] BTRFS info (device loop3): max_inline at 4096 [ 318.701866][T10295] BTRFS info (device loop3): using free space tree [ 318.794885][T10065] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 318.846179][T10295] BTRFS info (device loop3): enabling ssd optimizations [ 318.989177][T10065] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 319.025856][T10065] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 319.068150][T10065] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 319.104498][T10065] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 319.147396][T10065] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 319.170064][T10065] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.194569][T10065] usb 1-1: Product: syz [ 319.213860][T10065] usb 1-1: Manufacturer: syz [ 319.223955][T10065] usb 1-1: SerialNumber: syz [ 319.253477][T10311] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 319.374176][ T5776] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 319.902447][T10338] loop3: detected capacity change from 0 to 4096 [ 320.039195][T10342] fuse: Bad value for 'fd' [ 320.057360][T10342] UBIFS error (pid: 10342): cannot open "./file0", error -22 [ 320.340237][T10065] cdc_ncm 1-1:1.0: bind() failure [ 320.375077][T10065] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 320.391536][T10352] 9pnet_fd: Insufficient options for proto=fd [ 320.392173][T10065] cdc_ncm 1-1:1.1: bind() failure [ 320.523888][T10359] overlayfs: failed to clone upperpath [ 320.557765][T10065] usb 1-1: USB disconnect, device number 13 [ 321.373500][T10375] "syz.1.1585" (10375) uses obsolete ecb(arc4) skcipher [ 321.824825][T10065] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 321.970581][T10400] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1596'. [ 321.979853][T10400] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1596'. [ 322.035983][T10065] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 322.064763][T10065] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 322.104714][T10065] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 322.137354][T10065] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 322.157111][T10065] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.178399][T10065] usb 1-1: Product: syz [ 322.185374][T10065] usb 1-1: Manufacturer: syz [ 322.201616][T10065] usb 1-1: SerialNumber: syz [ 322.225782][T10065] usb 1-1: config 0 descriptor?? [ 322.495925][T10415] veth1_to_bond: entered promiscuous mode [ 322.516014][T10415] veth1_to_bond: entered allmulticast mode [ 322.538340][T10415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1600'. [ 322.670159][T10420] trusted_key: syz.3.1603 sent an empty control message without MSG_MORE. [ 322.691860][T10415] veth1_to_bond (unregistering): left allmulticast mode [ 322.710230][T10415] veth1_to_bond (unregistering): left promiscuous mode [ 322.786913][T10415] bond0: (slave bond_slave_1): Releasing backup interface [ 322.806963][T10419] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1602'. [ 322.822721][T10419] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1602'. [ 322.904579][T10419] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1602'. [ 322.920358][T10419] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1602'. [ 323.172254][T10065] usb 1-1: USB disconnect, device number 14 [ 323.180354][T10434] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1610'. [ 323.244682][T10434] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1610'. [ 323.400769][T10438] loop0: detected capacity change from 0 to 512 [ 323.441899][T10438] EXT4-fs: Ignoring removed mblk_io_submit option [ 323.466803][T10438] ext3: Unknown parameter 'nombcache..' [ 323.790083][T10448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1615'. [ 323.807940][T10449] loop0: detected capacity change from 0 to 64 [ 323.824523][T10448] netlink: 'syz.1.1615': attribute type 9 has an invalid length. [ 323.882716][T10448] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.892371][T10448] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.901575][T10448] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.910648][T10448] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.595360][T10440] overlayfs: failed to clone upperpath [ 324.752277][ T6100] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 324.779740][T10472] overlayfs: failed to clone upperpath [ 325.754799][ T5778] Bluetooth: hci3: command 0x0406 tx timeout [ 325.879634][T10511] overlayfs: failed to clone lowerpath [ 327.244661][T10548] veth1_macvtap: left promiscuous mode [ 327.279088][T10548] team0: Device veth1_macvtap failed to register rx_handler [ 328.042290][T10575] __nla_validate_parse: 2 callbacks suppressed [ 328.042311][T10575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1669'. [ 328.137166][T10575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1669'. [ 329.391903][T10583] loop0: detected capacity change from 0 to 32768 [ 329.413146][T10583] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1671 (10583) [ 329.467688][T10583] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 329.500577][T10583] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 329.531036][T10583] BTRFS info (device loop0): setting nodatacow, compression disabled [ 329.559007][T10583] BTRFS info (device loop0): disabling tree log [ 329.582025][T10583] BTRFS info (device loop0): turning on async discard [ 329.607258][T10583] BTRFS info (device loop0): max_inline at 0 [ 329.613333][T10583] BTRFS info (device loop0): using free space tree [ 329.829478][T10617] jffs2: notice: (10617) jffs2_build_xattr_subsystem: complete building xattr subsystem, 8 of xdatum (0 unchecked, 8 orphan) and 8 of xref (2 dead, 6 orphan) found. [ 330.680142][ T5775] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 332.285120][T10672] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 332.294188][T10672] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 332.303791][T10672] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 332.312938][T10672] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 332.744511][ T6053] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 332.818649][T10692] netlink: 1363 bytes leftover after parsing attributes in process `syz.5.1712'. [ 332.843456][T10693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1711'. [ 332.870765][T10693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1711'. [ 332.944545][ T6053] usb 1-1: Using ep0 maxpacket: 8 [ 332.963788][ T6053] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 332.988109][ T6053] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 333.019208][ T6053] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 333.075626][ T6053] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 333.117096][ T6053] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 333.145554][ T6053] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.165601][T10701] netlink: 276 bytes leftover after parsing attributes in process `syz.3.1714'. [ 333.399216][ T6053] usb 1-1: GET_CAPABILITIES returned 0 [ 333.417810][ T6053] usbtmc 1-1:16.0: can't read capabilities [ 333.608242][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 333.618550][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 333.635201][ T5839] usb 1-1: USB disconnect, device number 15 [ 334.537529][T10707] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.547168][T10707] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.557508][T10707] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.567450][T10707] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.585888][T10707] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.595098][T10707] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.604003][T10707] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.613374][T10707] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.154159][T10735] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1730'. [ 335.618971][T10746] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.628429][T10746] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.637753][T10746] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.646955][T10746] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.932650][T10752] TCP: TCP_TX_DELAY enabled [ 336.751912][T10794] loop0: detected capacity change from 0 to 256 [ 336.773863][T10794] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d) [ 336.847617][T10794] exFAT-fs (loop0): error, invalid size(size(4096) > aligned(9223372036854777344) [ 336.847617][T10794] [ 336.862010][T10794] exFAT-fs (loop0): Filesystem has been set read-only [ 337.926571][T10831] loop8: detected capacity change from 0 to 8 [ 337.963880][T10831] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 337.982793][T10831] loop8: partition table partially beyond EOD, truncated [ 338.004880][T10831] loop8: p1 size 2645487272 extends beyond EOD, truncated [ 338.147688][ T5774] udevd[5774]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 338.918583][T10867] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1785'. [ 339.857730][T10901] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.887972][T10901] bond0 (unregistering): Released all slaves [ 340.942463][T10933] FAULT_INJECTION: forcing a failure. [ 340.942463][T10933] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 340.972168][T10933] CPU: 0 PID: 10933 Comm: syz.0.1814 Not tainted syzkaller #0 [ 340.980704][T10933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 340.990873][T10933] Call Trace: [ 340.994195][T10933] [ 340.997229][T10933] dump_stack_lvl+0x18c/0x250 [ 341.002030][T10933] ? show_regs_print_info+0x20/0x20 [ 341.007617][T10933] ? load_image+0x420/0x420 [ 341.012292][T10933] ? __lock_acquire+0x7d80/0x7d80 [ 341.017480][T10933] should_fail_ex+0x394/0x4c0 [ 341.022396][T10933] prepare_alloc_pages+0x1e1/0x5b0 [ 341.027654][T10933] __alloc_pages+0x134/0x460 [ 341.032312][T10933] ? zone_statistics+0x170/0x170 [ 341.037403][T10933] ? alloc_pages+0x4e1/0x740 [ 341.042132][T10933] get_zeroed_page+0x17/0x40 [ 341.046743][T10933] mon_bin_open+0x229/0x510 [ 341.051397][T10933] chrdev_open+0x58c/0x600 [ 341.056031][T10933] ? cd_forget+0x160/0x160 [ 341.060845][T10933] ? fsnotify_perm+0x3ed/0x5e0 [ 341.065676][T10933] do_dentry_open+0x880/0x14b0 [ 341.070610][T10933] ? cd_forget+0x160/0x160 [ 341.075070][T10933] path_openat+0x284f/0x3270 [ 341.079704][T10933] ? do_sys_openat2+0xda/0x1d0 [ 341.084494][T10933] ? __x64_sys_openat+0x139/0x160 [ 341.089894][T10933] ? verify_lock_unused+0x140/0x140 [ 341.095134][T10933] ? do_filp_open+0x430/0x430 [ 341.100202][T10933] do_filp_open+0x1f2/0x430 [ 341.104765][T10933] ? vfs_tmpfile+0x620/0x620 [ 341.109432][T10933] ? _raw_spin_unlock+0x28/0x40 [ 341.114308][T10933] ? alloc_fd+0x590/0x640 [ 341.118681][T10933] do_sys_openat2+0x134/0x1d0 [ 341.123382][T10933] ? do_sys_open+0xe0/0xe0 [ 341.127824][T10933] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 341.133843][T10933] ? lock_chain_count+0x20/0x20 [ 341.138711][T10933] ? lock_chain_count+0x20/0x20 [ 341.143580][T10933] __x64_sys_openat+0x139/0x160 [ 341.148482][T10933] do_syscall_64+0x55/0xb0 [ 341.152916][T10933] ? clear_bhb_loop+0x40/0x90 [ 341.157705][T10933] ? clear_bhb_loop+0x40/0x90 [ 341.162434][T10933] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 341.168441][T10933] RIP: 0033:0x7f0ae035e98e [ 341.172890][T10933] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 341.192957][T10933] RSP: 002b:00007f0ae1322b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 341.201570][T10933] RAX: ffffffffffffffda RBX: 00007f0ae13236c0 RCX: 00007f0ae035e98e [ 341.209651][T10933] RDX: 0000000000000000 RSI: 00007f0ae1322c00 RDI: ffffffffffffff9c [ 341.217650][T10933] RBP: 00007f0ae1322c00 R08: 0000000000000000 R09: 0000000000000000 [ 341.225746][T10933] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 341.233821][T10933] R13: 00007f0ae0626038 R14: 00007f0ae0625fa0 R15: 00007ffedfc3e0f8 [ 341.242021][T10933] [ 341.329137][T10937] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1817'. [ 341.562195][T10945] jffs2: notice: (10945) jffs2_build_xattr_subsystem: complete building xattr subsystem, 8 of xdatum (0 unchecked, 8 orphan) and 8 of xref (2 dead, 6 orphan) found. [ 341.886107][T10959] overlayfs: failed to clone upperpath [ 343.895215][T11042] overlayfs: failed to clone upperpath [ 345.132142][T11078] loop0: detected capacity change from 0 to 2048 [ 345.244192][T11078] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 346.587545][T11127] FAULT_INJECTION: forcing a failure. [ 346.587545][T11127] name failslab, interval 1, probability 0, space 0, times 0 [ 346.630710][T11127] CPU: 0 PID: 11127 Comm: syz.0.1904 Not tainted syzkaller #0 [ 346.638325][T11127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 346.648421][T11127] Call Trace: [ 346.651709][T11127] [ 346.654754][T11127] dump_stack_lvl+0x18c/0x250 [ 346.659476][T11127] ? show_regs_print_info+0x20/0x20 [ 346.664723][T11127] ? load_image+0x420/0x420 [ 346.669252][T11127] ? __might_sleep+0xe0/0xe0 [ 346.674121][T11127] ? __lock_acquire+0x7d80/0x7d80 [ 346.679170][T11127] should_fail_ex+0x394/0x4c0 [ 346.683894][T11127] should_failslab+0x9/0x20 [ 346.688425][T11127] slab_pre_alloc_hook+0x59/0x300 [ 346.693478][T11127] kmem_cache_alloc+0x5a/0x2c0 [ 346.698356][T11127] ? dup_fd+0x56/0xa20 [ 346.702450][T11127] dup_fd+0x56/0xa20 [ 346.706384][T11127] ? do_raw_spin_unlock+0x121/0x230 [ 346.711641][T11127] ? _raw_spin_unlock+0x28/0x40 [ 346.716528][T11127] ? copy_fs_struct+0x1c3/0x270 [ 346.721437][T11127] ksys_unshare+0x45c/0x8f0 [ 346.725987][T11127] ? sighand_ctor+0x50/0x50 [ 346.730520][T11127] ? lock_chain_count+0x20/0x20 [ 346.735404][T11127] ? syscall_enter_from_user_mode+0x25/0x80 [ 346.741326][T11127] __x64_sys_unshare+0x38/0x40 [ 346.746240][T11127] do_syscall_64+0x55/0xb0 [ 346.750675][T11127] ? clear_bhb_loop+0x40/0x90 [ 346.755371][T11127] ? clear_bhb_loop+0x40/0x90 [ 346.760064][T11127] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 346.765977][T11127] RIP: 0033:0x7f0ae039e159 [ 346.770406][T11127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.790308][T11127] RSP: 002b:00007f0ae1323028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 346.798749][T11127] RAX: ffffffffffffffda RBX: 00007f0ae0625fa0 RCX: 00007f0ae039e159 [ 346.806767][T11127] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020400 [ 346.814937][T11127] RBP: 00007f0ae0435024 R08: 0000000000000000 R09: 0000000000000000 [ 346.823017][T11127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 346.831027][T11127] R13: 00007f0ae0626038 R14: 00007f0ae0625fa0 R15: 00007ffedfc3e0f8 [ 346.839052][T11127] [ 348.471723][T11173] overlayfs: failed to clone upperpath [ 349.593402][T11207] jffs2: notice: (11207) jffs2_build_xattr_subsystem: complete building xattr subsystem, 8 of xdatum (0 unchecked, 8 orphan) and 8 of xref (2 dead, 6 orphan) found. [ 350.444601][T11223] loop0: detected capacity change from 0 to 32768 [ 350.461649][T11223] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1941 (11223) [ 350.499606][T11223] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 350.520307][T11223] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 350.539686][T11223] BTRFS info (device loop0): setting nodatasum [ 350.549594][T11223] BTRFS info (device loop0): force zlib compression, level 3 [ 350.567794][T11223] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 350.587334][T11223] BTRFS info (device loop0): use lzo compression, level 0 [ 350.604541][T11223] BTRFS info (device loop0): turning on flush-on-commit [ 350.614928][T11223] BTRFS info (device loop0): enabling auto defrag [ 350.621558][T11223] BTRFS info (device loop0): max_inline at 4096 [ 350.663634][T11223] BTRFS info (device loop0): using free space tree [ 350.834533][T11223] BTRFS info (device loop0): enabling ssd optimizations [ 350.934422][ T28] audit: type=1800 audit(1788419843.547:641): pid=11223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1941" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 351.384057][ T5775] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 352.152503][T11266] jffs2: notice: (11266) jffs2_build_xattr_subsystem: complete building xattr subsystem, 8 of xdatum (0 unchecked, 8 orphan) and 8 of xref (2 dead, 6 orphan) found. [ 352.446077][T11273] overlayfs: failed to clone upperpath [ 352.957122][T11289] jffs2: notice: (11289) jffs2_build_xattr_subsystem: complete building xattr subsystem, 8 of xdatum (0 unchecked, 8 orphan) and 8 of xref (2 dead, 6 orphan) found. [ 353.825390][T11319] ip_tables: iptables: counters copy to user failed while replacing table [ 355.364656][T11350] fuse: Bad value for 'fd' [ 355.650125][T11360] netlink: 'syz.3.1990': attribute type 1 has an invalid length. [ 355.671339][T11362] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.680601][T11362] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.684435][T11360] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1990'. [ 355.689812][T11362] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.708599][T11362] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.781238][ T1141] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 356.538685][T11386] overlayfs: failed to clone upperpath [ 357.097943][T11403] overlayfs: failed to clone upperpath [ 357.138056][T11409] sch_tbf: burst 7 is lower than device bridge0 mtu (1514) ! [ 357.258312][T11410] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2013'. [ 357.281289][T11410] sch_tbf: burst 0 is lower than device bridge0 mtu (1514) ! [ 357.320165][ T28] audit: type=1326 audit(1788419849.937:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11411 comm="syz.1.2014" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0c83f9e159 code=0x0 [ 357.374081][T11416] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 357.550695][T11416] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.572683][T11416] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 357.604911][T11416] bond0 (unregistering): Released all slaves [ 357.732815][T11426] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2019'. [ 358.987826][T11461] overlayfs: failed to clone lowerpath [ 361.096602][T11468] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 361.275243][T11468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.328272][T11468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.353419][T11468] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 361.389304][T11468] bond0 (unregistering): Released all slaves [ 362.747298][T11503] overlayfs: failed to clone upperpath [ 362.764379][ C0] sched: RT throttling activated [ 363.781688][T11513] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 363.900565][T11513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 363.945285][T11513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.963123][T11513] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 363.982653][T11513] bond0 (unregistering): Released all slaves [ 368.081365][ T1141] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 368.112523][T11647] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 368.353123][T11657] netlink: 'syz.5.2118': attribute type 4 has an invalid length. [ 368.382751][T11657] netlink: 'syz.5.2118': attribute type 4 has an invalid length. [ 368.540626][T11664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2120'. [ 368.613234][T11664] bond0: entered promiscuous mode [ 368.658373][T11664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.775658][T11669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.805590][T11669] bond0: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 368.838143][T11669] bond0: (slave ip6gre1): Error -95 calling set_mac_address [ 370.015407][T11711] netlink: 'syz.0.2139': attribute type 10 has an invalid length. [ 370.594774][T11729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2148'. [ 370.622912][T11729] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2148'. [ 370.651351][T11729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2148'. [ 370.693555][T11729] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2148'. [ 370.786932][T11737] jffs2: notice: (11737) jffs2_build_xattr_subsystem: complete building xattr subsystem, 8 of xdatum (0 unchecked, 8 orphan) and 8 of xref (2 dead, 6 orphan) found. [ 371.722202][T11768] overlayfs: failed to clone upperpath [ 371.914726][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 375.196412][T11871] jffs2: notice: (11871) jffs2_build_xattr_subsystem: complete building xattr subsystem, 8 of xdatum (0 unchecked, 8 orphan) and 8 of xref (2 dead, 6 orphan) found. [ 375.889984][T11898] fuse: Bad value for 'fd' [ 375.898432][T11895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2223'. [ 376.103850][T11895] team0 (unregistering): Port device team_slave_0 removed [ 376.143069][T11895] team0 (unregistering): Port device team_slave_1 removed [ 376.723428][T11931] netlink: 'syz.1.2239': attribute type 1 has an invalid length. [ 379.120675][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.127484][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.183123][T12031] netlink: 'syz.5.2282': attribute type 2 has an invalid length. [ 379.248934][T12035] netlink: 'syz.1.2284': attribute type 1 has an invalid length. [ 379.754581][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 383.329106][T12153] fuse: Bad value for 'fd' [ 383.341353][T12152] 9pnet: p9_errstr2errno: server reported unknown error n$[ [ 383.341353][T12152] Q&|x [ 383.928105][T12177] overlayfs: failed to clone upperpath [ 384.109565][T12183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2346'. [ 384.234190][T12183] team0 (unregistering): Port device team_slave_0 removed [ 384.278910][T12183] team0 (unregistering): Port device team_slave_1 removed [ 385.030604][T10049] IPVS: starting estimator thread 0... [ 385.124514][T12219] IPVS: using max 18 ests per chain, 43200 per kthread [ 385.817162][ T4476] IPVS: stop unused estimator thread 0... [ 385.866805][T12248] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2375'. [ 386.803847][ T6100] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 389.259189][T12327] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 393.173229][ T28] audit: type=1326 audit(1788419885.787:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12467 comm="syz.3.2459" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f43cc99e159 code=0x0 [ 393.216999][T12470] overlayfs: failed to clone upperpath [ 393.583118][T12488] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2468'. [ 395.754723][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 396.011704][T12563] ip_tables: iptables: counters copy to user failed while replacing table [ 396.473314][T12583] netlink: 'syz.3.2508': attribute type 3 has an invalid length. [ 397.332991][T12612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2521'. [ 397.514313][T12616] netlink: 'syz.0.2523': attribute type 1 has an invalid length. [ 397.582144][T12616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.641116][T12622] bond0: (slave ip6gretap2): making interface the new active one [ 397.719190][T12622] bond0: (slave ip6gretap2): Enslaving as an active interface with an up link [ 397.747343][ T5839] IPVS: starting estimator thread 0... [ 397.848226][T12627] IPVS: using max 17 ests per chain, 40800 per kthread [ 399.084876][T12677] overlayfs: failed to clone upperpath [ 400.051607][ T28] audit: type=1326 audit(1788419892.667:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12709 comm="syz.1.2564" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0c83f9e159 code=0x0 [ 401.051451][T12735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2574'. [ 401.694056][ T5084] Bluetooth: hci1: command 0x0406 tx timeout [ 403.155752][T12801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2602'. [ 403.219228][T12803] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2603'. [ 404.127011][T12848] netlink: 'syz.0.2622': attribute type 7 has an invalid length. [ 404.144793][T12848] netlink: 'syz.0.2622': attribute type 7 has an invalid length. [ 405.359642][ T5839] libceph: connect (1)0.0.0.0:6789 error -22 [ 405.371255][ T5839] libceph: mon0 (1)0.0.0.0:6789 connect error [ 405.413414][T10065] libceph: connect (1)127.0.0.1:6789 error -101 [ 405.435913][T10065] libceph: mon0 (1)127.0.0.1:6789 connect error [ 405.564093][T10049] IPVS: starting estimator thread 0... [ 405.654633][T10065] libceph: connect (1)0.0.0.0:6789 error -22 [ 405.664675][T12897] IPVS: using max 16 ests per chain, 38400 per kthread [ 405.677933][T10065] libceph: mon0 (1)0.0.0.0:6789 connect error [ 405.724771][T10065] libceph: connect (1)127.0.0.1:6789 error -101 [ 405.749482][T10065] libceph: mon0 (1)127.0.0.1:6789 connect error [ 406.188290][T12885] ceph: No mds server is up or the cluster is laggy [ 406.204848][T10065] libceph: connect (1)0.0.0.0:6789 error -22 [ 406.211053][T12890] ceph: No mds server is up or the cluster is laggy [ 406.217998][T10065] libceph: mon0 (1)0.0.0.0:6789 connect error [ 406.286057][T10065] libceph: connect (1)127.0.0.1:6789 error -101 [ 406.313025][T10065] libceph: mon0 (1)127.0.0.1:6789 connect error [ 406.429140][T12924] 9pnet: p9_errstr2errno: server reported unknown error 000060928, [ 408.006033][T12995] x_tables: duplicate underflow at hook 2 [ 408.171893][T13003] overlayfs: failed to clone upperpath [ 408.200869][ T28] audit: type=1326 audit(1788419900.817:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13004 comm="syz.0.2688" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0ae039e159 code=0x0 [ 408.478275][T13019] netlink: 'syz.3.2692': attribute type 12 has an invalid length. [ 408.948052][T13036] ip6gre1: entered promiscuous mode [ 408.962574][T13036] ip6gre1: entered allmulticast mode [ 408.994541][T13036] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 409.610766][T13067] overlayfs: failed to clone lowerpath [ 409.682643][T13071] 9pnet_fd: Insufficient options for proto=fd [ 409.915887][ T4476] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 409.929851][ T4476] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 409.944823][T10049] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 410.204862][ T6023] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 410.274798][ T6023] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 412.292663][T13159] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 412.307344][T13159] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 412.315999][T13159] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 412.324046][T13159] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 413.478004][T13198] futex_wake_op: syz.1.2770 tries to shift op by 144; fix this program [ 413.895486][T13210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2775'. [ 414.094698][T10065] ip6_tnl_xmit_ctl: 6 callbacks suppressed [ 414.094722][T10065] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 414.154561][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 414.199266][T13216] veth1_to_bridge: entered allmulticast mode [ 414.219215][T13216] veth1_to_bridge: left allmulticast mode [ 414.742585][T13240] 9pnet_fd: Insufficient options for proto=fd [ 415.114949][ T5839] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 415.417556][T13262] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 417.246562][T13326] overlayfs: failed to clone upperpath [ 417.827830][ T3445] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 418.449613][T13370] overlayfs: failed to clone upperpath [ 419.454096][T13408] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2852'. [ 421.441746][T13472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2875'. [ 421.503873][T13472] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.513921][T13472] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.521237][T13469] syz.5.2874 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 421.523157][T13472] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.543282][T13472] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.565698][ T28] audit: type=1326 audit(1788419914.187:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13473 comm="syz.3.2876" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f43cc99e159 code=0x0 [ 421.588221][T13472] vxlan1: entered promiscuous mode [ 421.656433][T13477] 9pnet_fd: Insufficient options for proto=fd [ 422.634605][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 424.167809][T13558] overlayfs: failed to clone upperpath [ 426.274235][T13639] Invalid ELF header len 3 [ 427.218138][T13664] overlayfs: failed to clone upperpath [ 427.574240][T13675] overlayfs: failed to clone upperpath [ 427.754520][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 428.961990][T13682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.969882][T13682] bridge0: port 3(bond0) entered blocking state [ 428.977248][T13682] bridge0: port 3(bond0) entered disabled state [ 428.990769][T13682] bond0: entered allmulticast mode [ 428.999175][T13682] bond0: entered promiscuous mode [ 429.466268][T13699] vxcan3: entered promiscuous mode [ 429.987120][T13714] netlink: 208052 bytes leftover after parsing attributes in process `syz.3.2975'. [ 432.225253][T13774] veth1_to_bond: entered allmulticast mode [ 432.259310][T13774] veth1_to_bond: entered promiscuous mode [ 432.275229][T13774] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3000'. [ 432.637172][T13773] veth1_to_bond: left promiscuous mode [ 432.643103][T13773] veth1_to_bond: left allmulticast mode [ 433.299784][T13804] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3013'. [ 433.491865][T13812] overlayfs: failed to clone upperpath [ 434.271096][T13847] overlayfs: failed to clone upperpath [ 435.607498][T13891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3052'. [ 435.741687][T13891] bridge_slave_1 (unregistering): left allmulticast mode [ 435.772398][T13891] bridge_slave_1 (unregistering): left promiscuous mode [ 435.791640][T13891] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.922432][T13897] batadv_slave_1: entered promiscuous mode [ 435.931114][T13896] batadv_slave_1: left promiscuous mode [ 436.130932][T13917] overlayfs: failed to clone upperpath [ 436.911910][T13946] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3077'. [ 437.202137][ T5778] Bluetooth: hci1: unexpected event for opcode 0x0c03 [ 437.282943][T13963] netlink: 'syz.0.3081': attribute type 12 has an invalid length. [ 437.994521][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 440.221070][T14040] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3119'. [ 440.239612][T14040] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3119'. [ 440.560597][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.567378][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.509883][ T28] audit: type=1326 audit(1788419935.127:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14104 comm="syz.1.3143" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0c83f9e159 code=0x0 [ 442.977185][ T28] audit: type=1326 audit(1788419935.597:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14134 comm="syz.5.3155" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f03bb19e159 code=0x0 [ 445.654185][ T28] audit: type=1326 audit(1788419938.267:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14214 comm="syz.0.3181" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0ae039e159 code=0x0 [ 446.439679][T14241] 9pnet_fd: Insufficient options for proto=fd [ 447.519338][T14279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3206'. [ 447.562634][T14279] netlink: 75 bytes leftover after parsing attributes in process `syz.0.3206'. [ 448.752533][ T77] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 448.984249][T14330] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3230'. [ 449.151415][T14336] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 449.259551][T14336] bond1: (slave lo): Enslaving as an active interface with an up link [ 449.346425][T14336] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 449.422415][T14345] overlayfs: failed to clone lowerpath [ 449.796144][T14361] bridge0: entered allmulticast mode [ 449.915649][T14367] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3245'. [ 451.453123][T14419] overlayfs: failed to clone lowerpath [ 451.466698][T14419] overlayfs: failed to clone lowerpath [ 451.648374][T14428] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3267'. [ 452.609238][T14470] 9pnet_fd: Insufficient options for proto=fd [ 453.863881][T14520] netlink: 'syz.3.3305': attribute type 11 has an invalid length. [ 454.982064][T14565] bridge_slave_0: left allmulticast mode [ 455.001350][T14565] bridge_slave_0: left promiscuous mode [ 455.024782][T14565] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.067527][T14565] bridge_slave_1: left allmulticast mode [ 455.073341][T14565] bridge_slave_1: left promiscuous mode [ 455.103292][T14565] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.174993][T14565] team0: Port device team_slave_0 removed [ 455.187133][T14565] team0: Port device team_slave_1 removed [ 455.198770][T14565] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 455.244837][T14565] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 456.776287][T14605] overlayfs: failed to clone upperpath [ 459.227477][T14677] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3364'. [ 459.592874][T14693] overlayfs: failed to clone upperpath [ 460.302900][T14720] netlink: 'syz.3.3381': attribute type 4 has an invalid length. [ 460.434159][T14722] bridge0: port 1(dummy0) entered blocking state [ 460.475714][T14722] bridge0: port 1(dummy0) entered disabled state [ 460.482436][T14722] dummy0: entered allmulticast mode [ 460.512996][T14722] dummy0: entered promiscuous mode [ 460.549492][T14725] dummy0: left allmulticast mode [ 460.574536][T14725] dummy0: left promiscuous mode [ 460.583089][T14725] bridge0: port 1(dummy0) entered disabled state [ 460.729425][T14728] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3385'. [ 461.044924][ T5778] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 462.411071][T14795] overlayfs: failed to clone upperpath [ 463.097172][T14810] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3418'. [ 463.140882][T14810] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3418'. [ 463.166242][T14810] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3418'. [ 463.207132][T14810] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3418'. [ 465.877080][T14857] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3437'. [ 467.434523][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 468.680943][T14949] ipt_REJECT: TCP_RESET invalid for non-tcp [ 468.878342][T14953] overlayfs: failed to clone upperpath [ 468.943796][T14957] netlink: 'syz.1.3478': attribute type 2 has an invalid length. [ 468.973600][T14957] netlink: 'syz.1.3478': attribute type 9 has an invalid length. [ 469.006245][T14957] netlink: 'syz.1.3478': attribute type 10 has an invalid length. [ 469.014147][T14957] netlink: 'syz.1.3478': attribute type 11 has an invalid length. [ 469.051405][T14957] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3478'. [ 469.521031][T14971] 9pnet_fd: Insufficient options for proto=fd [ 469.710789][T14977] tmpfs: Bad value for 'size' [ 470.415038][T14998] netlink: 'syz.0.3494': attribute type 1 has an invalid length. [ 470.432369][T14998] netlink: 'syz.0.3494': attribute type 4 has an invalid length. [ 470.458576][T14998] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.3494'. [ 470.503826][T15000] netlink: 'syz.0.3494': attribute type 1 has an invalid length. [ 470.534452][T15000] netlink: 'syz.0.3494': attribute type 4 has an invalid length. [ 470.565725][T15000] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.3494'. [ 470.723263][T15008] overlayfs: failed to clone upperpath [ 471.309164][T15029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3507'. [ 472.980154][T15068] overlayfs: failed to clone upperpath [ 473.240678][T15078] overlayfs: failed to clone upperpath [ 474.060116][T15105] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3537'. [ 474.142884][T15107] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3537'. [ 474.325408][T15112] netlink: 208052 bytes leftover after parsing attributes in process `syz.0.3540'. [ 474.586607][T15124] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3546'. [ 474.596804][T15124] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3546'. [ 475.115496][T15144] 8021q: adding VLAN 0 to HW filter on device bond4 [ 475.140749][T15144] bridge0: port 2(bond4) entered blocking state [ 475.164677][T15144] bridge0: port 2(bond4) entered disabled state [ 475.181843][T15144] bond4: entered allmulticast mode [ 475.214669][T15144] bond4: entered promiscuous mode [ 475.220756][T15150] overlayfs: failed to clone upperpath [ 475.815547][T15173] vxcan3: entered promiscuous mode [ 476.433976][T15194] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3574'. [ 477.854500][T15229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3586'. [ 479.780900][ T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 481.365990][T15321] overlayfs: failed to resolve './cgroup': -2 [ 482.365945][T15346] overlayfs: failed to resolve './cgroup': -2 [ 483.035499][T15363] batadv_slave_1: entered promiscuous mode [ 483.058331][T15362] batadv_slave_1: left promiscuous mode [ 485.033963][T15415] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3668'. [ 485.287956][T15419] overlayfs: failed to resolve './cgroup': -2 [ 485.596809][T15433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3667'. [ 485.695966][T15433] bridge_slave_1 (unregistering): left allmulticast mode [ 485.724471][T15433] bridge_slave_1 (unregistering): left promiscuous mode [ 485.740737][T15433] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.019104][ T5778] Bluetooth: hci3: unexpected event for opcode 0x0c03 [ 486.317537][T15458] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3675'. [ 486.445175][T15466] overlayfs: failed to resolve './cgroup': -2 [ 487.108881][T15499] overlayfs: failed to resolve './cgroup': -2 [ 488.305645][T15526] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3714'. [ 488.344726][T15526] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3714'. [ 488.467917][T15531] netlink: 'syz.5.3708': attribute type 12 has an invalid length. [ 489.398231][T15569] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3721'. [ 489.424718][T15569] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3721'. [ 492.063640][T15653] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3765'. [ 492.841957][T15678] overlayfs: failed to clone upperpath [ 493.070735][ T28] audit: type=1326 audit(1788419985.687:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15685 comm="syz.0.3771" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0ae039e159 code=0x0 [ 493.552868][T15702] veth1_to_bond: entered allmulticast mode [ 493.560093][T15702] veth1_to_bond: entered promiscuous mode [ 493.568171][T15702] netlink: 148 bytes leftover after parsing attributes in process `syz.5.3774'. [ 493.762255][T15700] veth1_to_bond: left promiscuous mode [ 493.768215][T15700] veth1_to_bond: left allmulticast mode [ 494.045570][T15719] overlayfs: failed to clone upperpath [ 494.764592][ T28] audit: type=1326 audit(1788419987.377:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15739 comm="syz.1.3786" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0c83f9e159 code=0x0 [ 495.062987][ T28] audit: type=1326 audit(1788419987.677:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15748 comm="syz.3.3790" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f43cc99e159 code=0x0 [ 496.874491][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 497.453201][ T28] audit: type=1326 audit(1788419990.067:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15808 comm="syz.0.3808" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0ae039e159 code=0x0 [ 500.973896][T15893] bridge0: entered allmulticast mode [ 501.998151][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.005345][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.079473][T15921] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3853'. [ 502.609887][T15940] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 502.636321][T15940] bond2: (slave lo): Enslaving as an active interface with an up link [ 502.645901][T15940] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 502.938576][T15950] overlayfs: failed to clone lowerpath [ 503.331153][T15957] overlayfs: failed to clone lowerpath [ 504.538240][T15982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3879'. [ 504.733130][T15990] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3882'. [ 504.758222][T15992] bridge0: entered allmulticast mode [ 504.875998][T15997] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3894'. [ 506.173359][T16038] netlink: 'syz.1.3901': attribute type 11 has an invalid length. [ 507.360373][T15473] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.388898][T15473] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.472639][T16080] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 507.527760][T16080] bond0: (slave lo): Enslaving as an active interface with an up link [ 507.565657][T16080] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 507.685806][T15473] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.703586][T15473] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.775161][T16086] bond1: (slave lo): Releasing backup interface [ 507.795427][T16086] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 507.825750][T16086] bridge_slave_0: left allmulticast mode [ 507.846567][T16086] bridge_slave_0: left promiscuous mode [ 507.858408][T16086] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.897805][T16086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 507.920596][T16086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 507.989864][T16086] bond0: (slave ip6gretap2): Releasing active interface [ 508.099267][T15473] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.126953][T15473] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.192000][T16104] netlink: 'syz.5.3922': attribute type 11 has an invalid length. [ 508.327426][T15473] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.344154][T15473] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.970756][T15473] hsr_slave_0: left promiscuous mode [ 511.983453][T15473] hsr_slave_1: left promiscuous mode [ 512.059294][T15473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 512.089038][T15473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.107737][T15473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 512.125600][T15473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 512.196941][T15473] bridge_slave_1: left allmulticast mode [ 512.202775][T15473] bridge_slave_1: left promiscuous mode [ 512.230117][T15473] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.284879][T15473] bridge_slave_0: left allmulticast mode [ 512.290746][T15473] bridge_slave_0: left promiscuous mode [ 512.315075][T15473] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.557191][T15473] veth1_macvtap: left promiscuous mode [ 512.563024][T15473] veth0_macvtap: left promiscuous mode [ 512.572257][T15473] veth1_vlan: left promiscuous mode [ 512.582373][T15473] veth0_vlan: left promiscuous mode [ 514.871027][T15473] team0 (unregistering): Port device team_slave_1 removed [ 514.941714][T15473] team0 (unregistering): Port device team_slave_0 removed [ 515.020504][T15473] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 515.097540][T15473] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 515.633125][T15473] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 515.643037][T15473] bond0 (unregistering): Released all slaves [ 515.742406][T16206] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3951'. [ 515.962653][T16244] bond2: (slave lo): Releasing backup interface [ 516.006370][T16244] bond2: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 516.098358][T16244] bridge_slave_0: left allmulticast mode [ 516.104415][T16244] bridge_slave_0: left promiscuous mode [ 516.124850][T16244] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.765470][T16244] bridge_slave_1: left allmulticast mode [ 516.771801][T16244] bridge_slave_1: left promiscuous mode [ 516.807721][T16244] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.870439][T16244] team0: Port device team_slave_0 removed [ 516.884248][T16244] team0: Port device team_slave_1 removed [ 516.910207][T16244] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 516.935504][T16244] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 516.957954][T16244] bond1: (slave geneve2): Releasing active interface [ 516.977951][T16244] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.993653][T16244] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.003556][T16244] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.013159][T16244] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.032204][T16244] bond0: left allmulticast mode [ 517.037812][T16244] bond0: left promiscuous mode [ 517.042846][T16244] bridge0: port 3(bond0) entered disabled state [ 517.372709][T16283] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3979'. [ 520.675876][T16366] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3996'. [ 520.767681][T16368] bridge_slave_0: left allmulticast mode [ 520.789850][T16368] bridge_slave_0: left promiscuous mode [ 520.800205][T16368] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.850422][T16368] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 520.870427][T16368] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 520.897001][T16368] bond1: (slave veth3): Releasing backup interface [ 520.909832][T16368] veth3: left promiscuous mode [ 520.935265][T16368] bond2: (slave geneve2): Releasing active interface [ 520.972288][T16368] bond4: left allmulticast mode [ 520.984164][T16368] bond4: left promiscuous mode [ 520.994894][T10065] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 521.014138][T16368] bridge0: port 2(bond4) entered disabled state [ 521.164931][ T6053] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 522.809402][T16444] tmpfs: Bad value for 'size' [ 523.073750][T16456] netlink: 'syz.5.4013': attribute type 2 has an invalid length. [ 523.090153][T16456] netlink: 'syz.5.4013': attribute type 9 has an invalid length. [ 523.098437][T16456] netlink: 'syz.5.4013': attribute type 10 has an invalid length. [ 523.108309][T16456] netlink: 'syz.5.4013': attribute type 11 has an invalid length. [ 523.129721][T16456] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4013'. [ 524.332739][T16496] netlink: 'syz.3.4025': attribute type 2 has an invalid length. [ 524.355340][T16496] netlink: 'syz.3.4025': attribute type 9 has an invalid length. [ 524.380926][T16496] netlink: 'syz.3.4025': attribute type 10 has an invalid length. [ 524.403333][T16496] netlink: 'syz.3.4025': attribute type 11 has an invalid length. [ 524.430486][T16496] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4025'. [ 524.486285][T16503] netlink: 'syz.5.4027': attribute type 1 has an invalid length. [ 524.503311][T16503] netlink: 'syz.5.4027': attribute type 4 has an invalid length. [ 524.511844][T16503] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.4027'. [ 524.552018][T16504] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.4027'. [ 525.468370][T16525] ipt_REJECT: TCP_RESET invalid for non-tcp [ 525.765458][T16538] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.4042'. [ 525.786102][T16540] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 525.786102][T16540] The task syz.0.4040 (16540) triggered the difference, watch for misbehavior. [ 525.828783][T16538] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.4042'. [ 526.600529][T16555] ipt_REJECT: TCP_RESET invalid for non-tcp [ 527.594497][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 527.602720][T16587] ipt_REJECT: TCP_RESET invalid for non-tcp [ 529.240101][T16628] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4076'. [ 529.282033][T16628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4076'. [ 530.328365][T16668] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4087'. [ 531.339614][T16699] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4102'. [ 531.406077][T16702] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4102'. [ 532.799742][T16744] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4115'. [ 532.825795][T16744] bond0: option downdelay: invalid value (18446744073675997440) [ 532.833547][T16744] bond0: option downdelay: allowed values 0 - 2147483647 [ 535.490606][T16818] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 535.559971][T16822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4130'. [ 537.142268][T16884] overlayfs: failed to clone upperpath [ 539.745712][T16976] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4164'. [ 539.824499][T16976] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4164'. [ 539.888651][T16976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4164'. [ 541.354623][ T5839] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 541.719854][T17014] : renamed from vlan0 [ 542.661361][T17041] overlayfs: failed to clone upperpath [ 545.246052][T17096] overlayfs: failed to clone upperpath [ 546.331950][T17126] overlayfs: failed to clone upperpath [ 546.663472][T17133] tipc: New replicast peer: 127.0.0.1 [ 546.682047][T17133] tipc: Enabled bearer , priority 10 [ 546.728902][T17133] tipc: Disabling bearer [ 547.041434][T17149] sctp: [Deprecated]: syz.1.4237 (pid 17149) Use of struct sctp_assoc_value in delayed_ack socket option. [ 547.041434][T17149] Use struct sctp_sack_info instead [ 547.061655][T17149] sctp: [Deprecated]: syz.1.4237 (pid 17149) Use of struct sctp_assoc_value in delayed_ack socket option. [ 547.061655][T17149] Use struct sctp_sack_info instead [ 547.256068][T17155] overlayfs: failed to clone upperpath [ 547.465831][ T28] audit: type=1326 audit(1788420040.077:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17159 comm="syz.0.4240" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ae039e159 code=0x0 [ 547.548289][T17162] overlayfs: failed to clone upperpath [ 547.598958][ T28] audit: type=1326 audit(1788420040.217:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17159 comm="syz.0.4240" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae039e159 code=0x7ffc0000 [ 547.633298][ T28] audit: type=1326 audit(1788420040.217:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17159 comm="syz.0.4240" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae039e159 code=0x7ffc0000 [ 547.666692][ T28] audit: type=1326 audit(1788420040.217:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17159 comm="syz.0.4240" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae039e159 code=0x7ffc0000 [ 547.697222][ T28] audit: type=1326 audit(1788420040.217:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17159 comm="syz.0.4240" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae039e159 code=0x7ffc0000 [ 547.731879][ T28] audit: type=1326 audit(1788420040.217:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17159 comm="syz.0.4240" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae039e159 code=0x7ffc0000 [ 547.762146][ T28] audit: type=1326 audit(1788420040.217:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17159 comm="syz.0.4240" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f0ae039e159 code=0x7ffc0000 [ 547.788187][ T28] audit: type=1326 audit(1788420040.267:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17159 comm="syz.0.4240" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0ae035e98e code=0x7ffc0000 [ 547.826253][ T28] audit: type=1326 audit(1788420040.267:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17159 comm="syz.0.4240" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0ae035e98e code=0x7ffc0000 [ 547.857337][ T28] audit: type=1326 audit(1788420040.277:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17159 comm="syz.0.4240" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0ae035e98e code=0x7ffc0000 [ 548.084767][T17174] sctp: [Deprecated]: syz.3.4246 (pid 17174) Use of struct sctp_assoc_value in delayed_ack socket option. [ 548.084767][T17174] Use struct sctp_sack_info instead [ 548.134241][T17174] sctp: [Deprecated]: syz.3.4246 (pid 17174) Use of struct sctp_assoc_value in delayed_ack socket option. [ 548.134241][T17174] Use struct sctp_sack_info instead [ 548.184859][T10065] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 548.324688][T10065] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 548.462384][T17189] overlayfs: failed to clone upperpath [ 549.488080][T17210] sctp: [Deprecated]: syz.5.4259 (pid 17210) Use of struct sctp_assoc_value in delayed_ack socket option. [ 549.488080][T17210] Use struct sctp_sack_info instead [ 549.516119][T17210] sctp: [Deprecated]: syz.5.4259 (pid 17210) Use of struct sctp_assoc_value in delayed_ack socket option. [ 549.516119][T17210] Use struct sctp_sack_info instead [ 550.520186][T17223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4272'. [ 550.546856][T17225] overlayfs: failed to clone upperpath [ 550.603884][T17223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4272'. [ 550.984409][T17245] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4274'. [ 551.159094][T17255] overlayfs: failed to clone upperpath [ 551.500010][T17267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4281'. [ 551.579366][T17267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4281'. [ 551.835675][T17273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4287'. [ 551.886643][T17277] overlayfs: failed to clone upperpath [ 552.239903][T17291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4294'. [ 552.283798][T17291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4294'. [ 552.573533][T17308] overlayfs: failed to clone upperpath [ 552.753273][T17319] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4305'. [ 552.793546][T17319] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4305'. [ 554.297979][T17384] overlayfs: failed to clone upperpath [ 555.509715][T17409] validate_nla: 6 callbacks suppressed [ 555.509737][T17409] netlink: 'syz.3.4345': attribute type 10 has an invalid length. [ 555.763171][T17414] __nla_validate_parse: 2 callbacks suppressed [ 555.763191][T17414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4348'. [ 555.929420][T17414] bridge0 (unregistering): left allmulticast mode [ 556.700661][T17445] netlink: 'syz.5.4369': attribute type 10 has an invalid length. [ 557.465660][T17471] overlayfs: failed to clone upperpath [ 557.489291][T17471] overlayfs: failed to clone upperpath [ 557.541343][T17476] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 557.708303][T17480] IPVS: sed: FWM 3 0x00000003 - no destination available [ 559.098105][T17526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4391'. [ 559.150213][T17526] bridge0 (unregistering): left allmulticast mode [ 561.484135][T17598] 8021q: adding VLAN 0 to HW filter on device team0 [ 561.556612][T17598] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 561.646658][T10065] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 561.840807][T17598] syz.5.4421 (17598) used greatest stack depth: 19912 bytes left [ 562.084741][T10065] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 562.173825][ T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 562.442281][T17623] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4433'. [ 563.192550][T17659] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 563.225005][ T39] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 563.238800][ T39] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 563.251513][T17659] CIFS: Attempting to mount //127.0.0.1/share [ 563.266217][T10045] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 563.285738][T17666] CIFS: VFS: Invalid response size 0 for command 0 [ 563.302136][T17666] CIFS: VFS: \\127.0.0.1 No task to wake, unknown frame received! NumMids 1 [ 563.448657][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.457926][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.061246][T17659] CIFS: VFS: \\127.0.0.1 Error -512 sending data on socket to server [ 564.082557][T17659] ------------[ cut here ]------------ [ 564.088951][T17659] WARNING: CPU: 1 PID: 17659 at fs/smb/client/smb2ops.c:97 smb2_add_credits+0x1365/0x2600 [ 564.099233][T17659] Modules linked in: [ 564.103172][T17659] CPU: 1 PID: 17659 Comm: syz.5.4449 Not tainted syzkaller #0 [ 564.110810][T17659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 564.121063][T17659] RIP: 0010:smb2_add_credits+0x1365/0x2600 [ 564.127436][T17659] Code: 03 42 80 3c 28 00 74 08 4c 89 e7 e8 b5 b1 3c ff 49 8b 34 24 48 c7 c7 a0 21 f7 8a e8 35 f1 e0 07 e9 eb f9 ff ff e8 1b 30 e4 fe <0f> 0b e9 d9 ef ff ff e8 0f 30 e4 fe c6 05 5e be d3 0b 01 48 c7 c7 [ 564.147370][T17659] RSP: 0018:ffffc900034e7400 EFLAGS: 00010287 [ 564.153492][T17659] RAX: ffffffff82a35255 RBX: ffff888028d342c0 RCX: 0000000000080000 [ 564.161668][T17659] RDX: ffffc9000da2e000 RSI: 000000000006b871 RDI: 000000000006b872 [ 564.169787][T17659] RBP: 0000000000000200 R08: 0000000000000003 R09: 0000000000000004 [ 564.178316][T17659] R10: dffffc0000000000 R11: fffff5200069ce70 R12: 1ffff110051a6858 [ 564.186634][T17659] R13: dffffc0000000000 R14: ffff888028d34000 R15: 0000000000000000 [ 564.194708][T17659] FS: 00007f03bbfd36c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 564.203750][T17659] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 564.210522][T17659] CR2: 000000110c3eeef1 CR3: 00000000492fd000 CR4: 00000000003506e0 [ 564.218673][T17659] Call Trace: [ 564.221999][T17659] [ 564.225220][T17659] compound_send_recv+0x1254/0x3040 [ 564.230541][T17659] ? cifs_pick_channel+0x320/0x320 [ 564.235878][T17659] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 564.241664][T17659] ? cifs_strtoUTF16+0x30e/0x3f0 [ 564.246918][T17659] ? mutex_unlock+0x10/0x10 [ 564.251479][T17659] ? cifs_mapchar+0x380/0x380 [ 564.256415][T17659] cifs_send_recv+0x40/0x50 [ 564.260966][T17659] SMB2_negotiate+0x16b5/0x4270 [ 564.266030][T17659] ? smb3_encryption_required+0x2f0/0x2f0 [ 564.271919][T17659] ? smb2_negotiate+0x5c/0x70 [ 564.276688][T17659] ? do_raw_spin_unlock+0x121/0x230 [ 564.281974][T17659] ? _raw_spin_unlock+0x28/0x40 [ 564.286960][T17659] cifs_negotiate_protocol+0x445/0x670 [ 564.292463][T17659] cifs_get_smb_ses+0x8d6/0x1b00 [ 564.297530][T17659] cifs_mount_get_session+0xef/0x440 [ 564.302843][T17659] dfs_mount_share+0x1e9/0x7b0 [ 564.307814][T17659] cifs_mount+0xbc/0x650 [ 564.312135][T17659] ? __rwlock_init+0x150/0x150 [ 564.317071][T17659] ? cifs_is_path_remote+0x6f0/0x6f0 [ 564.322404][T17659] ? do_raw_spin_unlock+0x121/0x230 [ 564.327729][T17659] ? smb3_update_mnt_flags+0x52f/0xc10 [ 564.333238][T17659] ? cifs_setup_cifs_sb+0x52f/0x840 [ 564.338547][T17659] cifs_smb3_do_mount+0x2e5/0x710 [ 564.343626][T17659] ? cifs_sb_deactive+0x80/0x80 [ 564.348593][T17659] ? vfs_parse_fs_string+0x10f/0x170 [ 564.353961][T17659] ? vfs_parse_fs_param+0x420/0x420 [ 564.359279][T17659] smb3_get_tree+0x5a5/0xa90 [ 564.363926][T17659] vfs_get_tree+0x8c/0x280 [ 564.368497][T17659] do_new_mount+0x24a/0xa40 [ 564.373061][T17659] __se_sys_mount+0x2e7/0x3d0 [ 564.377911][T17659] ? __x64_sys_mount+0xc0/0xc0 [ 564.382737][T17659] ? lockdep_hardirqs_on+0x98/0x150 [ 564.388161][T17659] ? __x64_sys_mount+0x20/0xc0 [ 564.392973][T17659] do_syscall_64+0x55/0xb0 [ 564.397895][T17659] ? clear_bhb_loop+0x40/0x90 [ 564.402769][T17659] ? clear_bhb_loop+0x40/0x90 [ 564.407577][T17659] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 564.413539][T17659] RIP: 0033:0x7f03bb19e159 [ 564.418046][T17659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 564.437926][T17659] RSP: 002b:00007f03bbfd3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 564.446524][T17659] RAX: ffffffffffffffda RBX: 00007f03bb425fa0 RCX: 00007f03bb19e159 [ 564.454612][T17659] RDX: 0000200000000400 RSI: 0000200000000300 RDI: 0000200000000200 [ 564.462736][T17659] RBP: 00007f03bb235024 R08: 0000000000000000 R09: 0000000000000000 [ 564.470971][T17659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 564.479078][T17659] R13: 00007f03bb426038 R14: 00007f03bb425fa0 R15: 00007ffd947e6148 [ 564.487190][T17659] [ 564.490348][T17659] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 564.497753][T17659] CPU: 1 PID: 17659 Comm: syz.5.4449 Not tainted syzkaller #0 [ 564.505501][T17659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 564.515659][T17659] Call Trace: [ 564.518966][T17659] [ 564.521921][T17659] dump_stack_lvl+0x18c/0x250 [ 564.526623][T17659] ? show_regs_print_info+0x20/0x20 [ 564.531931][T17659] ? load_image+0x420/0x420 [ 564.536488][T17659] panic+0x2ca/0x720 [ 564.540422][T17659] ? bpf_jit_dump+0xd0/0xd0 [ 564.544960][T17659] __warn+0x2e0/0x470 [ 564.548961][T17659] ? smb2_add_credits+0x1365/0x2600 [ 564.554181][T17659] ? smb2_add_credits+0x1365/0x2600 [ 564.559415][T17659] report_bug+0x2be/0x4f0 [ 564.563771][T17659] ? smb2_add_credits+0x1365/0x2600 [ 564.568994][T17659] ? smb2_add_credits+0x1365/0x2600 [ 564.574209][T17659] ? smb2_add_credits+0x1367/0x2600 [ 564.579514][T17659] handle_bug+0xcf/0x120 [ 564.583775][T17659] exc_invalid_op+0x1a/0x50 [ 564.588313][T17659] asm_exc_invalid_op+0x1a/0x20 [ 564.593183][T17659] RIP: 0010:smb2_add_credits+0x1365/0x2600 [ 564.599096][T17659] Code: 03 42 80 3c 28 00 74 08 4c 89 e7 e8 b5 b1 3c ff 49 8b 34 24 48 c7 c7 a0 21 f7 8a e8 35 f1 e0 07 e9 eb f9 ff ff e8 1b 30 e4 fe <0f> 0b e9 d9 ef ff ff e8 0f 30 e4 fe c6 05 5e be d3 0b 01 48 c7 c7 [ 564.618902][T17659] RSP: 0018:ffffc900034e7400 EFLAGS: 00010287 [ 564.624994][T17659] RAX: ffffffff82a35255 RBX: ffff888028d342c0 RCX: 0000000000080000 [ 564.632976][T17659] RDX: ffffc9000da2e000 RSI: 000000000006b871 RDI: 000000000006b872 [ 564.640959][T17659] RBP: 0000000000000200 R08: 0000000000000003 R09: 0000000000000004 [ 564.649034][T17659] R10: dffffc0000000000 R11: fffff5200069ce70 R12: 1ffff110051a6858 [ 564.657101][T17659] R13: dffffc0000000000 R14: ffff888028d34000 R15: 0000000000000000 [ 564.665292][T17659] ? smb2_add_credits+0x1365/0x2600 [ 564.670532][T17659] compound_send_recv+0x1254/0x3040 [ 564.675767][T17659] ? cifs_pick_channel+0x320/0x320 [ 564.680915][T17659] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 564.686567][T17659] ? cifs_strtoUTF16+0x30e/0x3f0 [ 564.691520][T17659] ? mutex_unlock+0x10/0x10 [ 564.696059][T17659] ? cifs_mapchar+0x380/0x380 [ 564.700844][T17659] cifs_send_recv+0x40/0x50 [ 564.705389][T17659] SMB2_negotiate+0x16b5/0x4270 [ 564.710283][T17659] ? smb3_encryption_required+0x2f0/0x2f0 [ 564.716041][T17659] ? smb2_negotiate+0x5c/0x70 [ 564.720757][T17659] ? do_raw_spin_unlock+0x121/0x230 [ 564.725977][T17659] ? _raw_spin_unlock+0x28/0x40 [ 564.730859][T17659] cifs_negotiate_protocol+0x445/0x670 [ 564.736442][T17659] cifs_get_smb_ses+0x8d6/0x1b00 [ 564.741411][T17659] cifs_mount_get_session+0xef/0x440 [ 564.747063][T17659] dfs_mount_share+0x1e9/0x7b0 [ 564.751871][T17659] cifs_mount+0xbc/0x650 [ 564.756131][T17659] ? __rwlock_init+0x150/0x150 [ 564.760916][T17659] ? cifs_is_path_remote+0x6f0/0x6f0 [ 564.766215][T17659] ? do_raw_spin_unlock+0x121/0x230 [ 564.771523][T17659] ? smb3_update_mnt_flags+0x52f/0xc10 [ 564.777015][T17659] ? cifs_setup_cifs_sb+0x52f/0x840 [ 564.782344][T17659] cifs_smb3_do_mount+0x2e5/0x710 [ 564.787404][T17659] ? cifs_sb_deactive+0x80/0x80 [ 564.792271][T17659] ? vfs_parse_fs_string+0x10f/0x170 [ 564.797579][T17659] ? vfs_parse_fs_param+0x420/0x420 [ 564.802800][T17659] smb3_get_tree+0x5a5/0xa90 [ 564.807420][T17659] vfs_get_tree+0x8c/0x280 [ 564.811855][T17659] do_new_mount+0x24a/0xa40 [ 564.816379][T17659] __se_sys_mount+0x2e7/0x3d0 [ 564.821081][T17659] ? __x64_sys_mount+0xc0/0xc0 [ 564.825859][T17659] ? lockdep_hardirqs_on+0x98/0x150 [ 564.831071][T17659] ? __x64_sys_mount+0x20/0xc0 [ 564.835877][T17659] do_syscall_64+0x55/0xb0 [ 564.840308][T17659] ? clear_bhb_loop+0x40/0x90 [ 564.845005][T17659] ? clear_bhb_loop+0x40/0x90 [ 564.849783][T17659] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 564.855862][T17659] RIP: 0033:0x7f03bb19e159 [ 564.860551][T17659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 564.880171][T17659] RSP: 002b:00007f03bbfd3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 564.888601][T17659] RAX: ffffffffffffffda RBX: 00007f03bb425fa0 RCX: 00007f03bb19e159 [ 564.896581][T17659] RDX: 0000200000000400 RSI: 0000200000000300 RDI: 0000200000000200 [ 564.904569][T17659] RBP: 00007f03bb235024 R08: 0000000000000000 R09: 0000000000000000 [ 564.912635][T17659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 564.920622][T17659] R13: 00007f03bb426038 R14: 00007f03bb425fa0 R15: 00007ffd947e6148 [ 564.928731][T17659] [ 564.932111][T17659] Kernel Offset: disabled [ 564.936634][T17659] Rebooting in 86400 seconds..